Server-side template injection with information disclosure via user-supplied objects 1 SSTI Lab 5 Nov 23, 2024