1818
Applicable Platforms
Language : Java (Prevalence = Undetermined)
Language : PHP (Prevalence = Undetermined)
Language : Python (Prevalence = Undetermined)
Language : JavaScript (Prevalence = Undetermined)
Language : Interpreted (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Technology : Client Server (Prevalence = Undetermined)
Alternate Terms
Server-Side Template Injection / SSTI : This term is used for injection into template engines
being used by a server.
Client-Side Template Injection / CSTI : This term is used for injection into template engines being
used by a client.
Common Consequences
Scope Impact Likelihood
Integrity Execute Unauthorized Code or Commands
Potential Mitigations
Phase: Architecture and Design
Choose a template engine that offers a sandbox or restricted mode, or at least limits the power of
any available expressions, function calls, or commands.
Phase: Implementation
Use the template engine's sandbox or restricted mode, if available.
Observed Examples
Reference Description
CVE-2017-16783 server-side template injection in content management server
https://www.cve.org/CVERecord?id=CVE-2017-16783
CVE-2020-9437 authentication / identity management product has client-side template injection
https://www.cve.org/CVERecord?id=CVE-2020-9437
CVE-2020-12790 Server-Side Template Injection using a Twig template
https://www.cve.org/CVERecord?id=CVE-2020-12790
CVE-2021-21244 devops platform allows SSTI
https://www.cve.org/CVERecord?id=CVE-2021-21244
CVE-2020-4027 bypass of Server-Side Template Injection protection mechanism with macros
in Velocity templates
https://www.cve.org/CVERecord?id=CVE-2020-4027
CVE-2020-26282 web browser proxy server allows Java EL expressions from Server-Side
Template Injection
https://www.cve.org/CVERecord?id=CVE-2020-26282
CVE-2020-1961 SSTI involving mail templates and JEXL expressions
https://www.cve.org/CVERecord?id=CVE-2020-1961
CVE-2019-19999 product does not use a "safe" setting for a FreeMarker configuration, allowing
SSTI
CWE Version 4.14
CWE-1338: Improper Protections Against Hardware Overheating
CWE-1338: Improper Protections Against Hardware Overheating