Tyranitero

**Name of the Vulnerable Software and Affected Versions** jFinal version 4.9.08 **Description** A Server-Side Template Injection (SSTI) issue allows a remote attacker to execute arbitrary code via the template function. This enables the attacker to potentially gain control over the server. **Recommendations** For jFinal version 4.9.08, as a temporary workaround, consider disabling the template function until a patch is available. Restrict access to the template functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.