CVE-2023-49964

CVE-2023-49964: Iniezione di Template Lato Server di FreeMarker in Alfresco È stato scoperto un problema in Hyland Alfresco Community Edition =7.2.0. Inserendo contenuti dannosi nel file folder.get.html.ftl, un attaccante può effettuare attacchi SSTI Server-Side Template Injection, che possono...

PT-2026-106848

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

GHSA-27VJ-QCQG-25RC fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 Exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Injeção de Template do Lado do Servidor SSTI no XDocReport permite Execução Remota de Código via mecanismo Apache Velocity Definição da Vulnerabilidade Visão geral da vulnerabilidade Server-Side Template Injection SSTI é uma vulnerabilidade de segurança web que permit...

CVE-2022-22954

Analyse von CVE-2022-22954 Überblick Workspace ONE Access ein Modell zur Bereitstellung von Arbeitsbereichen als Dienstleistung bietet Multi-Faktor-Authentifizierung, Single Sign-On und bedingten Zugriff für SaaS, Web- und mobile Anwendungen. CVE-2022-22954 ist eine Sicherheitslücke durch...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Controllo Versione Infra Template Nuclei per rilevare versioni di Apinizer inferiori a 2026.04.6, che sono vulnerabili a CVE-2026-11561 Server-Side Template Injection che porta all'esecuzione di codice remoto, CVSS 9.8. Utilizzo echo | nuclei -t...

CVE-2024-23692

Vulnerabilità CVE-2024-23692 di Rejetto HFS HTTP File Server Panoramica Rejetto HFS HTTP File Server è un semplice server web per la condivisione di file che facilita la condivisione di file su una rete o su Internet. Nonostante la sua facilità d'uso e semplicità, è stata scoperta una vulnerabili...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Esecuzione Remota di Codice Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerabilità| Iniezione di template lato server SSTI → RCE Autenticazione| Non richiesta Punteggio CVSS| Critico Contesto| Scoperto durante HackTheBox CTF Descrizione...

CVE-2018-14716

CVE-2018-14716 PoC für CVE-2018-14716 Exploit-Titel: Craft CMS SEOmatic Plugin 3.1.4 - Serverseitige Template-Injection Datum: 2018-07-20 Software-Link: https://github.com/nystudio107/craft-seomatic Exploit-Autor: Sebastian Kriesten 0xB455 Kontakt: https://twitter.com/0xB455 CVE: CVE-2018-14716...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

CVE-2026-104851 fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinja2.Template....render... calls in...

RHEL 9 : Satellite 6.17.12 Async Update (Critical) (RHSA-2026:74505)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74505 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection SSTI vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template...

CVE-2026-53964

The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...

RHEL 9 : Satellite 6.18.10 Async Update (Critical) (RHSA-2026:74504)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74504 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

CVE-2026-102142 Kiteworks Core Remote Code Execution through Server-Side Template Injection

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...