Details
Alert Id 90036
Alert Type Active
Status beta
Risk High
CWE 74
WASC 20
Technologies Targeted All
Tags

Summary

When the user input is inserted in the template instead of being used as argument in rendering is evaluated by the template engine. Depending on the template engine it can lead to remote code execution.

Solution

Instead of inserting the user input in the template, use it as rendering argument.

References

Code

org/zaproxy/zap/extension/ascanrulesBeta/SstiBlindScanRule.java