id summary reporter owner description type status priority milestone component version resolution keywords cc 2003 The static cache should not allow cache keys containing '../' Nicklas Nordborg everyone "This results in cache files being created (or read) outside the designated directory for user files (as configured in base.config). '''This issue affects BASE versions between 2.11 (the static cache was introduced by #1261) and 3.7.1. We recommend all BASE user to upgrade to BASE 3.7.2.''' '''A temporary workaround is to disable the static cache by setting `cache.static.disabled = true` in the `base.config` file. Do not forget to restart the BASE web server.'''" defect closed blocker BASE 3.7.2 core fixed