CST-7205 Unauthenticated Remote code execution via JSONWS

テンプレート処理中にエラーが発生しました。
The following has evaluated to null or missing:
==> workaround  [in template "1#8431626#324504" at line 18, column 14]

----
Tip: If the failing expression is known to legally refer to something that's sometimes null or missing, either specify a default value like myOptionalVar!myDefault, or use <#if myOptionalVar??>when-present<#else>when-missing</#if>. (These only cover the last step of the expression; to cover the whole expression, use parenthesis: (myOptionalVar.foo)!myDefault, (myOptionalVar.foo)??
----

----
FTL stack trace ("~" means nesting-related):
	- Failed at: #if workaround.getData()?has_content  [in template "1#8431626#324504" at line 18, column 9]
----
1<article> 
2	<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Date</h3> 
3 
4	<p>${.vars['reserved-article-display-date'].data}</p> 
5 
6	<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Title</h3> 
7 
8	<p>${.vars['reserved-article-title'].data}</p> 
9 
10	<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Description</h3> 
11 
12	<p>${description.getData()}</p> 
13 
14	<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Severity</h3> 
15 
16	<p>${severity.getData()}</p> 
17 
18	<#if workaround.getData()?has_content> 
19		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Workaround</h3> 
20		<p>${workaround.getData()}</p> 
21	</#if> 
22 
23	<#if issuelink.getData()?has_content> 
24		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Issue Links</h3> 
25 
26		<p><em>Note that some or all of these may not yet be accessible. The CST remains committed to full disclosure of all 
27				security issues once fully resolved.</em></p> 
28 
29		<ul> 
30			<li><a href="http://issues.liferay.com/browse/$issuelink.data">${issuelink.getData()}</a></li> 
31		</ul> 
32	</#if> 
33 
34	<#if binarypatchlink.getData()?has_content> 
35 
36		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Binary Patch</h3> 
37 
38		<p>See the Community Security Team <a href="/web/community-security-team/process#binary-patch">process page</a> for 
39			details on working with binary patches. The list below <em>may</em> contain multiple links. If there are 
40			multiple links, please check the notes section below for additional information. Please note that binary patches 
41			only apply to the release with which this issue is associated. Applying a binary patch to any other release will 
42			probably result in a broken install!</p> 
43 
44		<ul> 
45			<#assign count = 1 /> 
46 
47			<#list binarypatchlink.getSiblings() as cur_binarypatchlink> 
48				<li><a href="${cur_binarypatchlink.getData()}">Binary Patch ${count}</a></li> 
49 
50				<#assign count = count + 1 /> 
51			</#list> 
52		</ul> 
53	</#if> 
54 
55	<#if sourcepatchlink.getData()?has_content> 
56 
57		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Source Patch</h3> 
58 
59		<p>See the Community Security Team <a href="/web/community-security-team/process#source-patch">process page</a> for 
60			details on working with source patches. Please note that source patches only apply to the release with which 
61			this issue is associated. Applying a source patch to any other release will probably result in a broken install! 
62		</p> 
63 
64		<ul> 
65			<#list sourcepatchlink.getSiblings() as cur_sourcepatchlink> 
66				<li><a href="${cur_sourcepatchlink.getData()}">Source Patch</a></li> 
67			</#list> 
68		</ul> 
69 
70		<p>For Github URLs suffixed with <code>.patch</code>, removing this suffix will yield a graphical view of the patch. 
71		</p> 
72	</#if> 
73 
74	<#if notes.getData()?has_content> 
75		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Notes</h3> 
76 
77		<p>${notes.getData()}</p> 
78	</#if> 
79 
80	<#if credit.getData()?has_content> 
81		<h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Credit</h3> 
82 
83		<p>${credit.getData()}</p> 
84	</#if> 
85</article>