---
id: 5548
title: "Server-Side Template Injection"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/server-side-template-injection"
published_at: "2025-09-03T07:38:00Z"
tags: ["rce", "web-security", "template-injection", "ssti", "template-engines"]
phying_url: "https://phying.com/item/5548"
lang: en
---

# Server-Side Template Injection

## Summary

James Kettle's seminal paper on server-side template injection: a detection and exploitation methodology, generic exploits for five template engines, sandbox escapes and RCE zero-days.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-09-03T07:38:00Z
- **Original:** https://portswigger.net/research/server-side-template-injection
- **Phying News:** https://phying.com/item/5548