Home/ MITRE Matrix/ Defense Evasion/ T1221

T1221Template Injection

T1221 — Template Injection is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 2 detection use cases covering it and 1 threat-intel article citing it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

1Articles

0Sub-techniques

1Tactic

Use cases covering this technique (2)

[LLM] Twig SSTI markers in request-controlled fields against Craft/Formie public forms Bespoke exploit · hunting SΣP [LLM] Active Twig RCE gadget strings in Craft/Formie HTTP request inputs Bespoke exploit · alerting SΣP

Articles citing this technique (1)

crit [GHSA / CRITICAL] CVE-2026-52889: Formie Hidden field defaults vulnerable to Server-Side Template Injection art-243