9 lines
437 B
Plaintext
9 lines
437 B
Plaintext
|
Server-side template injections occur when an application
|
||
|
|
retrieves data from a user or a third-party service and inserts it into a
|
||
|
|
template, without sanitizing it first.
|
||
|
|
|
||
|
|
If an application contains a template that is vulnerable to injections,
|
||
|
|
it is exposed to attacks that target the underlying rendering server.
|
||
|
|
|
||
|
|
A user with malicious intent can create requests that will cause
|
||
|
|
the template to change its logic into unwanted behavior.
|