[MEDIUM] Flarum: Path traversal in LESS parser via theme color settings (incomplete fix for CVE-2023-27577)

PKSA-4s1v-jz1f-4jpx GHSA-xjvc-pw2r-6878

Affected package: flarum/core

Affected version: >=2.0.0-beta.1,<=2.0.0-beta.8|<=1.8.15

Reported by:
GitHub