account take over apache arbitrary file read arbitrary file write ato bypass code execution content-type csp csrf denial of service deserialization disputed dompurify dos electron function html improper validation java javascript jenkins log4j log4j2 moodle mozilla mxss node nodejs npm oauth open redirect parser differential path traversal php prototype-pollution python rce redos rpc sandbox sop spoofing sqli ssrf unauth unauthenticated webshell wordpress xss