[HIGH] Flarum vulnerable to LFI and Blind SSRF via Avatar upload

PKSA-4zyn-nz6f-g7kq CVE-2023-40033 GHSA-67c6-q4j4-hccg

Affected package: flarum/framework

Affected version: <1.8.0

Reported by:
GitHub