Sql injection

2024-02-0203:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

server-side template injection

ssti vulnerability

code execution

security document

nvd

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.7%

JSON

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.