# SSTI

<https://tryhackme.com/room/learnssti>

## Introduction

Occurs when a user input is injected in the template engine of an app. DoS, privilege escalation, RCE are several security issues that can occur here. SSTI vulnerabilities are found in websites which use template engines to generate dynamic content.&#x20;

For example, Jinja2 is a template engine used in Flask applications.&#x20;

SSTI is a server side exploit.&#x20;
