Asad Iqbal

An issue in the software allows a remote attacker to execute arbitrary code via the `Subject` and `Identifier` fields. This enables the attacker to perform unauthorized actions on the system.

The issue is related to an arbitrary file upload vulnerability in the Ticket Generation function. This allows attackers to execute arbitrary code by uploading crafted files, such as .html or .svg files.