This blog post contains a thorough analysis of Server Side Template Injection vulnerability identified in CrushFTP and identified as CVE-2024-4040, patch analysis and exploitation process explained.