Skip to content
Turning Email Template Injection into Remote Code Execution
labs.cognisys.group | vulnerability | #rce | #pentesting | #web-security | #template-injection | #ssti | #email-templates
Summary
A pentest case study turning email template customization into RCE: server-side template injection in password-recovery emails progressed from expression evaluation to full command execution.
- Published
- Collected