[blibble]

absolutely, most vulnerabilities are stopped by the frontend

this one gets all the way through and hits the backend

better hope your backend is on a separate LAN with no internet access..!

[tetha]

This one could possibly hit past the backend and hit tools like sentry, a log aggregation and such, through an unaffected backend.