<article><h2>Contents</h2><ul><li><a href="#references">References</a></li></ul><hr><h2 id="references">References </h2><ul><li><a href="https://portswigger.net/web-security/server-side-template-injection">Portswigger SSTI</a></li><li><a href="https://hackerone.com/reports/125980">uber.com may RCE by Flask Jinja2 Template Injection</a></li><li><a href="https://hackerone.com/reports/164224">Server side template injection via Smarty template </a></li><li><a href="https://mahmoudsec.blogspot.com/2019/04/handlebars-template-injection-and-rce.html">$10,000 bounty in Shopify - Server Side Template Injection in Return Magic email templates?</a></li><li><a href="https://www.betterhacker.com/2018/12/rce-in-hubspot-with-el-injection-in-hubl.html">RCE in Hubspot with EL injection in HubL</a></li><li><a href="https://hawkinsecurity.com/2017/12/13/rce-via-spring-engine-ssti/">YAHOO! RCE via Spring Engine SSTI</a></li><li><a href="http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic/">Exploitation of Server Side Template Injection with Craft CMS plugin SEOmatic &lt;=3.1.3 | CVE-2018-14716</a></li><li><a href="https://medium.com/bugbountywriteup/frapp%C3%A9-technologies-erpnext-server-side-template-injection-74e1c95ec872">Frappé Technologies ERPNext Server Side Template Injection</a></li></ul></article>

Pentest Reference: SSTI

Contents

References