CVE-2022-40634

CVE-2022-40634: Iniezione di template lato server FreeMarker in CrafterCMS Inserendo contenuto malintenzionato in un template FTL, un attaccante può eseguire attacchi SSTI Server-Side Template Injection, che possono sfruttare gli oggetti esposti di FreeMarker per aggirare le restrizioni e ottener...

CVE-2026-46439

A flaw was found in compliance-trestle. This Server-Side Template Injection SSTI vulnerability exists in the trestle author jinja command, which recursively evaluates rendered templates. An attacker can inject malicious payloads into data fields, such as SSP documents or Lookup Tables, to achieve...

CVE-2026-33154

Report sulla Vulnerabilità SSTI in Dynaconf Riepilogo Dynaconf è vulnerabile a Server-Side Template Injection SSTI a causa della valutazione non sicura dei template nel resolver @Jinja. Quando il pacchetto jinja2 è installato, Dynaconf valuta le espressioni di template incorporate nei valori di...

CVE-2026-25731

Server-Side Template Injection SSTI nel Motore Templite Gravità: Alta CVSS 7.8 Software interessato: calibre Corretto in: 9.2.0 Avviso: GHSA-xrh9-w7qx-3gcc Riepilogo Una vulnerabilità di Server-Side Template Injection SSTI nel motore di templating Templite di Calibre consente l'esecuzione...

CVE-2025-24893

Infos Questa PoC prima verifica la presenza della SSTI e, se funziona, entra in un ciclo e ti permette di eseguire comandi da remoto. I comandi exec e shell attualmente fanno la stessa cosa. Utilizzo Connessione root@kitploit: python3 poc.py Esempio Con debug impostato su False predefinito...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

SSTI-Exploit-Detector

SSTI-Exploit-Detector SSTI Exploit Detector ist ein Tool zur Erkennung potenzieller Server-Side Template Injection SSTI -Schwachstellen in Webanwendungen. SSTI-Exploit-Detector Jenderal92 Funktionen Benutzerdefinierte Payload-Datei : Ermöglicht Benutzern, eigene Payloads hinzuzufügen, um...

CVE-2026-37004

BerriAI litellm (

CVE-2026-37004

BerriAI litellm =1.82.4 is vulnerable to Server-Side Template Injection SSTI, which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpromptcontent parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment...

CVE-2024-6386-WPML-SSTI

Este repositorio nao tem um README...

CVE-2026-57170 Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsectioninclude and mdcleaninclude re-parse the content of an included Markdown file as Jinja2 template co...

CVE-2026-54757

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757

Compliance-trestle (Trestle) , a Python SDK and CLI for managing OSCAL compliance documents, is vulnerable to server-side template injection (SSTI) leading to remote code execution . The root cause is that the MDCleanInclude and MDSectionInclude Jinja2 tags re-parse untrusted Markdown content as ...

CVE-2026-77129

CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...

CVE-2026-77129 Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2026-77136

CVE-2026-77136 is a Server-Side Template Injection (SSTI) in the TYPO3 extension powermail (in2code). The raw value of a form field configured as the sender name is passed directly into a Fluid template without sanitization, allowing an unauthenticated user to inject Fluid template syntax and exe...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

CVE-2026-75574

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...