Server-Side Template Injection(SSTI)

2023-05-1103:41:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

server-side template injection

com.ibeetl:beetl

remote attacker

render function

crafted payload

software

0.003 Low

EPSS

Percentile

69.4%

JSON

com.ibeetl:beetl is vulnerable to Server-Side Template Injection(SSTI). A remote attacker is able to cause server-side template injection due to insufficient checks in render function via a crafted payload.

CPENameOperatorVersion
beetlle3.15.4.RELEASE
beetlle3.15.4.RELEASE

CPE	Name	Operator	Version
	beetl	le	3.15.4.RELEASE
	beetl	le	3.15.4.RELEASE

References

gitee.com/xiandafu/beetl/issues/I6RUIP

github.com/luelueking/Beetl-3.15.0-vuln-poc

0.003 Low

EPSS

Percentile

69.4%

JSON

Related for VERACODE:40470