fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

GHSA-27VJ-QCQG-25RC fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: explora com um navegador emulado, executa JavaScript, preserva informações originais do perfil do usuário light: apenas analisa HTML e envia requisições, sem JavaScript, DESTRUTIVO redefi...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Injeção de Template do Lado do Servidor SSTI no XDocReport permite Execução Remota de Código via mecanismo Apache Velocity Definição da Vulnerabilidade Visão geral da vulnerabilidade Server-Side Template Injection SSTI é uma vulnerabilidade de segurança web que permit...

CVE-2022-22954

Análise do CVE-2022-22954 Visão geral Workspace ONE Access modelo de fornecimento de espaço de trabalho como serviço fornece autenticação multifator, logon único e acesso condicional para SaaS, aplicativos web e móveis. CVE-2022-22954 é uma vulnerabilidade de Server-side Template Injection presen...

CVE-2026-11561

CVE-2026-11561 — Verificação de Versão SSTI / RCE do Apinizer Infra Template Nuclei para detectar versões do Apinizer inferiores a 2026.04.6, que são vulneráveis a CVE-2026-11561 Injeção de Template do Lado do Servidor que leva à Execução Remota de Código, CVSS 9.8. Uso echo | nuclei -t...

CVE-2024-23692

Vulnerabilidade Rejetto HFS HTTP File Server CVE-2024-23692 Visão Geral Rejetto HFS HTTP File Server é um servidor de arquivos web simples que facilita o compartilhamento de arquivos através de uma rede ou da internet. Apesar de sua facilidade de uso e simplicidade, uma vulnerabilidade crítica...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — Execução Remota de Código SSTI no XWiki Visão Geral Campo| Detalhes ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerabilidade| Injeção de Template no Servidor SSTI → RCE Autenticação| Não exigida Pontuação CVSS| Crítico Contexto| Descoberto durante o CTF do HackTheBox Descrição...

CVE-2018-14716

CVE-2018-14716 PoC para CVE-2018-14716 Título do Exploit: Plugin Craft CMS SEOmatic 3.1.4 - Injeção de Template no Lado do Servidor Data: 2018-07-20 Link do Software: https://github.com/nystudio107/craft-seomatic Autor do Exploit: Sebastian Kriesten 0xB455 Contato: https://twitter.com/0xB455 CVE:...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

RHEL 9 : Satellite 6.17.12 Async Update (Critical) (RHSA-2026:74505)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74505 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection SSTI vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template...

CVE-2026-53964

The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...

RHEL 9 : Satellite 6.18.10 Async Update (Critical) (RHSA-2026:74504)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74504 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

CVE-2026-102142 Kiteworks Core Remote Code Execution through Server-Side Template Injection

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...

CVE-2026-102142 Kiteworks Core Remote Code Execution through Server-Side Template Injection

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...

CVE-2026-102146

The Kiteworks Email Protection Gateway is vulnerable to an Arbitrary File Write vulnerability caused by Server-Side Template Injection . An authenticated administrator with limited, delegated permissions can exploit this to write files with attacker-controlled content to arbitrary locations acces...