CyberRota Analysis
AI-GeneratedThe vulnerability allows dynamic subscripts and conditional gating to bypass the Jinja AST whitelist, leading to the execution of unfiltered code during runtime. This results in the exposure of sensitive information, such as installation paths and Python version details, in notifications sent to attacker-controlled webhook URLs. Organizations using affected notification systems should prioritize remediation to prevent potential data leakage.
Original NVD Description
Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %} conditional gating bypass both the AST check and the test-render (stub has small job.id). At runtime, the gated branch executes and exceptions write full tracebacks into notification body, which is POSTed to attacker-controlled webhook URL. Leaks install paths, Python version, source line numbers.