< 1.17.28
1.17.28
Liima before 1.17.28 allows server-side template injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.