FossBilling information leakage vulnerability

FossBilling versions 0.1.0 to 0.8.7 have security vulnerabilities. These vulnerabilities stem from unauthenticated API/guest/system/templateExists endpoints. In these endpoints, TemplateExists uses Path::join with the file parameter that is controlled by an attacker. This approach does not reject...