Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

CVEs (189)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27995 1Fortinet 1Fortisoar Jun 17, 2026 Apr 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload.
CVE-2021-4315 1Psiturk 1Psiturk Jun 17, 2026 Jan 28, 2023 N/A· v4 8.8 HIGH· v3 5.2 MEDIUM· v2 A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper...Show more A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f2aa87687bf852ae0194a4335f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-219676.Show less
CVE-2022-47896 1Jetbrains 1Intellij Idea Jun 17, 2026 Dec 22, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
CVE-2022-25813 1Apache 1Ofbiz Jun 17, 2026 Sep 2, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manage...Show more In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible.Show less
CVE-2022-27662 1F5 1Traffix Signaling Delivery Controller Jun 17, 2026 May 5, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows...Show more On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedShow less
CVE-2022-0944 1Sqlpad 1Sqlpad Jun 17, 2026 Mar 15, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
CVE-2022-0896 1Microweber 1Microweber Jun 17, 2026 Mar 9, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0323 1Mustache Project 1Mustache Jun 17, 2026 Jan 21, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.
CVE-2021-39128 1Atlassian 2Jira Data Center Jira Server Jun 17, 2026 Sep 16, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection...Show more Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. The affected versions of Jira Server or Data Center are before version 8.13.12, and from version 8.14.0 before 8.19.1.Show less

Previous 1...6 7 8 910