Server-Side Template Injection (SSTI)

freemarker is vulnerable to server-side template injection SSTI. By using java.security.ProtectionDomain.getClassLoader templates, an attacker is able to gain access to the classloader and subsequently the filesystem or execute arbitrary code on the host OS...