Potential Server-Side Template Injection in Velocity

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•31

Detects exceptions in the Velocity template renderer, which likely indicates dynamic rendering of user-controlled input. This vulnerability, known as Server-Side Template Injection (SSTI), can lead to Remote Code Execution (RCE) if successfully exploited.