7.5high
CVE-2018-14716in critical feed1 exploit
SEOmatic plugin for Craft CMS SSTI Vulnerability
Also known as GHSA-6j9m-rp7m-3gfg
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
32.7%
percentile 98%
Public exploits
1
Exploit-DB
Summary
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
Exploit prediction (EPSS)
32.67% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-45108 Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection · webapps · 2018-07-31
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| packagist | nystudio107/craft-seomatic | <3.1.4 | 3.1.4 |
Classification
- Weakness
- CWE-94 Improper Control of Generation of Code
References
- exploit-db.com /exploits/45108/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- github.com /nystudio107/craft-seomatic/releases/tag/3.1.4 · x_refsource_CONFIRM, x_transferred
- twitter.com /nystudio107/status/1021855169515057152 · x_refsource_CONFIRM, x_transferred
- ha.cker.info /exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic/ · x_refsource_MISC, x_transferred
- twitter.com /nystudio107/status/1021847835418009605 · x_refsource_CONFIRM, x_transferred
- github.com /nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1 · x_refsource_CONFIRM, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2018-14716 · advisory
- github.com /nystudio107/craft-seomatic · package
- exploit-db.com /exploits/45108 · web
- ha.cker.info /exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic · web
Sources
- CVE List: CVE-2018-14716
- GitHub Advisory: GHSA-6j9m-rp7m-3gfg
- NVD: CVE-2018-14716
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.