Server-Side Template Injection

Template syntax smuggled into server-side templates, executing code in the template engine.

Specifications & Metrics

cwe

CWE-1336

impact

Critical

Core Principles & Analysis

• A probe like {{7*7}} that renders as 49 confirms the engine is evaluating input.
• Escalation to full code execution is common in Python and Java template engines.
• Fix: treat templates as code, never build them from user input.