OSWE 学习笔记 6 - ERPNext Authentication Bypass and Server Side Template Injection