PT-2018-12683 · Craft Cms · Craft Cms Seomatic Plugin

0Xb455 · Published 2018-08-06 · Updated 2022-05-13 · CVE-2018-14716

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Craft CMS SEOmatic plugin versions prior to 3.1.4

Description A Server Side Template Injection (SSTI) issue was found, where requests that do not match any elements incorrectly generate the canonicalUrl. This can lead to the execution of Twig code.

Recommendations For versions prior to 3.1.4, update to version 3.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the SEOmatic plugin until a patch is applied.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2018-14716

GHSA-6J9M-RP7M-3GFG

Affected Products

Craft Cms Seomatic Plugin

References · 11

• 🔥 https://exploit-db.com/exploits/45108 · Exploit
• https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4 · Vendor Advisory
• https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14716 · Security Note
• https://twitter.com/nystudio107/status/1021847835418009605 · Vendor Advisory
• https://twitter.com/nystudio107/status/1021855169515057152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14716 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6j9m-rp7m-3gfg · Vendor Advisory
• https://github.com/nystudio107/craft-seomatic · Note
• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14716 · Note