Skip to content
Threat Feed
Subscribe

Product

Document-Merge-Service

1 brief RSS
high advisory

Remote Code Execution in document-merge-service via Jinja2 SSTI

The Adfinis document-merge-service is vulnerable to RCE via server-side template injection (SSTI) in XLSX templates due to an improperly sandboxed Jinja2 environment.

document-merge-service
2t