CWE-1336: Server-Side Template Injection / SSTI
The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.
Also known as Improper Neutralization of Special Elements Used in a Template Engine, Client-Side Template Injection / CSTI.
A kind of CWE-94 Improper Control of Generation of Code.
From the CWE List. © The MITRE Corporation.
Newest
- ipw metazoIPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because...10.0 Critical
- wix jamwix-incubator jam Jinja2 Template jam.py special elements used in a template engine4.8 Medium
- tikiwikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3...9.9 Critical
- aimhubio aimhubio/aim, aimstack aim +1 moreUnrestricted Code Execution in aimhubio/aim5.9 Medium
- significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 moreServer-Side Template Injection (SSTI) in significant-gravitas/autogpt8.8 High
- apache ofbizApache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE3.5 Low
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro deploy special elements used in a template engine5.3 Medium
- pallets jinja, debian linux +1 moreJinja sandbox breakout through attr filter selecting format method5.4 Medium
spacy-llmPyPISpacy-LLM Server-Side Template Injection (SSTI) vulnerability9.8 Critical- wyn enterprise enterpriseCode Injection in Wyn Enterprise8.7 High
- logpoint agentxAn issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access...6.9 Medium
@perfood/couch-authnpmCouchAuth has a Server-Side Template Injection vulnerability in its email functionality7.3 High- zhyd oneblogOneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template...8.0 High
- tandoor recipesTandoor Recipes - SSTI - Remote Code Execution10.0 Critical
- alexacrm dynamics 365 integrationDynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection9.9 Critical
- pallets jinjaJinja has a sandbox breakout through indirect reference to format method5.4 Medium
github.com/openshift/must-gatherGo,govulncheck-vulndbopenSUSE +1 moreOpenshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation8.8 High- pwndocPwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters6.5 Medium
- b3log siyuanSiYuan has an SSTI via /api/template/renderSprig6.9 Medium
- allegraAllegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability8.8 High
- saso nikolov event tickets with ticket scannerWordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability9.9 Critical
- supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability9.1 Critical
- apache ofbizApache OFBiz: Bypass SameSite restrictions with target redirection using URL parameters (SSTI and CSRF leading to RCE)8.9 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability9.1 Critical
- intel neural compressor softwareImproper neutralization of special elements used in SQL command in some Intel(R) Neural...7.3 High
- supsystic contact form by supsystic, contact form +1 moreWordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability9.1 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +1 more +3 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability9.1 Critical
- webkul krayin crmA Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote...8.8 High
- ethyca fidesRemote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine9.1 Critical
- wpmlWPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection9.9 Critical
- shopwareShopware vulnerable to Server Side Template Injection in Twig using Context functions8.3 High
- shopwareShopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag8.3 High
- deepset haystackInsecure Jinja2 templates rendered in Haystack Components can lead to RCE7.5 High
- opencartopenCart Server-Side Template Injection (SSTI) vulnerability7.2 High
- airbytehq airbyte, airbyte airbytehq +1 moreRemote Code Execution (RCE) via Server Side Template Injection (SSTI) in Airbyte8.6 High
- strongshopStrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability...7.2 High
- adfinis document-merge-service, document merge service +1 moredocument-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection7.2 High
- rejetto http file serverRejetto HTTP File Server 2.3m Unauthenticated RCE9.8 Critical
- unitecms unlimited elements for elementorUnlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import8.8 High
shopware/shopwarePackagistShopware Remote Code Execution Vulnerability9.8 Critical- requarks wiki, wiki.js +1 moreWiki.js Stored XSS through Client Side Template Injection7.1 High
- verbb formieverbb/formie Server-Side Template Injection for variable-enabled settings4.4 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search...8.4 High
- inducer relateServer-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a...7.5 High
- dgtlmoon changedetection.ioServer Side Template Injection in Jinja2 allows Remote Command Execution10.0 Critical
- dfir-iris iris, iris-web +1 moreiris-web vulnerable to Server Side Template Injection in reports6.8 Medium
- crushftpUnauthenticated arbitrary file read and remote code execution in CrushFTP9.8 Critical
- inducer relateAn issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via...8.8 High
- fortinet fortimanagerA improper neutralization of special elements used in a template engine [CWE-1336] in...6.3 Medium
- gibbonedu gibbonGibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template...9.8 Critical
- Show moreLoading…