Craft CMS input validation vulnerability

Craft CMS has a vulnerability in input validation. This vulnerability stems from a bypass of the blacklist in the Twig create function. Due to the case-sensitive checking of class names, PHP class resolution is case-insensitive. Attackers with template execution privileges can instantiate...