Server-side template injection occurs when user input is unsafely embedded into a server-side template, allowing users to inject template directives. Using malicious template directives, an attacker may execute arbitrary code and take full control of the web server.

Avoid creating templates from user input. Instead pass user input to the template using template parameters.

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H