CVE-2018-14716

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

32.67% chance of exploitation in the next 30 days, 98th percentile

Published

2018-08-06

Updated

2024-08-05

Proof-of-concept exploits (3)

• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-…
• 0xB455/CVE-2018-147161★ · 2024-05-15
• Ginove/post0★ · 2021-05-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45108

Security advisories

• nystudio107/craft-seomatic/releases/tag/3.1.4
• https://twitter.com/nystudio107/status/1021847835418009605
• https://twitter.com/nystudio107/status/1021855169515057152
• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-…
• advisories/GHSA-6j9m-rp7m-3gfg

References

• CVE Record
• NVD entry

Related

• CVE-2021-34646
• CVE-2018-4939