File upload over private IM channel

How it was found

A team member can upload the files in the private IM chat channel of other members.This can be done by using the IM channel id. Please refer to the attached POC's. Let me know if any more details are needed.