Server Side Template Injection

Server-side template injection (SSTI) is a type of security vulnerability that can occur in web applications that use server-side templating technologies like Jinja2, Twig, or FreeMaker. SSTI occurs when user input is not properly sanitized and is embedded in a template in an unsafe manner, which can result in remote code execution on the server. … Continue reading Server Side Template Injection