ERPNext Fix: Restrict Jinja Globals in process_statement_of_accounts Templates

Vulnerability Overview Vulnerability Title: fix: restrict jinja globals in process statement of accounts templates #56458 Vulnerability ID: #56458 Vulnerability Description: This vulnerability involves restricting Jinja global variables in the "process statement of accounts" template to mitigate potential security risks. Affected Scope Affected Module: Affected Versions: - Backport version 15-hotfix - Backport version 16-hotfix - Backport version 16-hotfix Remediation Fixing Commits: - Author: - Time: Last month - Content: Fixed the usage of Jinja global variables in the "process statement of accounts" template. - Commit Link: diptanilsaha pushed a commit that referenced this pull request last month Related Commits: - Author: - Time: Last month - Content: Fixed the usage of Jinja global variables in the "process statement of accounts" template. - Commit Link: diptanilsaha pushed a commit that referenced this pull request last month Other Related Commits: - Author: - Time: 3 weeks ago - Content: Updated version to 16.29.0 - Commit Link: frappe-pr-bot pushed a commit that referenced this pull request 3 weeks ago - Author: - Time: 3 weeks ago - Content: Updated version to 15.118.8 - Commit Link: frappe-pr-bot pushed a commit that referenced this pull request 3 weeks ago POC Code or Exploit Code No specific POC code available Additional Information Vulnerability Status: Merged Participants: 3 people Development Status: Successfully merging this pull request closes these issues Summary This vulnerability involves restricting Jinja global variables in the "process statement of accounts" template to prevent potential security risks. The remediation includes multiple commits, ultimately finalized by and successfully merged into the main branch.

Goal Reached Thanks to every supporter — we hit 100%!

ERPNext Fix: Restrict Jinja Globals in process_statement_of_accounts Templates

More from this source