Authenticated users with migration rights in older Countly server versions can trigger recursive file deletion outside intended directories, risking data loss.
Server-side template injection allows attackers to execute arbitrary code by tricking the server into processing user input as executable template logic rather than static text.
