We have released a patch file to fix the following problem. This is not a security problems.
User cannot upload file via asyncronous upload screen when upload destination contains / (slash).
Please apply patch file. This patch file is available for Movable Type 6.3.
The patch file contains following files. Please replace the same files on your servers.