The problem affects users who use the sandbox in Latte and templates from untrusted sources.
Sandbox first appeared in Latte 2.8.0. The issue is fixed in the versions 2.8.8, 2.9.6 and 2.10.8.
The issues were discovered by - JinYiTong (https://github.com/JinYiTong) - 赵钰迪 20212010122@fudan.edu.cn
{ "nvd_published_at": "2022-01-04T20:15:00Z", "github_reviewed_at": "2022-01-06T19:42:15Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }