Other nomination
Server-Side Template Injection: RCE for the Modern Web App
User input concatenated into a server-side template is executed by the template engine, not just reflected, so it looks like XSS while actually running code on the server. The paper gives a detect-identify-exploit methodology and working sandbox escapes to remote code execution for FreeMarker, Velocity, Smarty, Twig and Jade, plus zerodays in Alfresco and XWiki.
Record
- Researcher
- James Kettle
- Published by
- PortSwigger
- Date
- Format
- Recording
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host.