writeups.xyz / Handlebars template injection and RCE in a Shopify app

Submitter : c2a

Date: 4 April 2019

Bounty : 10,000

Vulnerabilities :

• SSTI
• RCE

Programs :

• Shopify

Authors :

• Mahmoud Gamal (@Zombiehelp54)

Link :
https://mahmoudsec.blogspot.com/2019/04/handlebars-template-injection-and-rce.html