PT-2020-20739 · Seomatic · Seomatic

Published 2020-03-04 · Updated 2022-05-24 · CVE-2020-9757

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SEOmatic versions prior to 3.3.0 SEOmatic versions prior to 3.2.46

Description The issue allows Server-Side Template Injection that can lead to Remote Code Execution (RCE) via malformed data sent to the metacontainers controller. This can also result in information disclosure. The exploitation occurs through sending specifically crafted data to the metacontainers controller, which is vulnerable to Server-Side Template Injection.

Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later. For versions prior to 3.2.46, update to version 3.2.46 or later. As a temporary workaround, consider restricting access to the metacontainers controller until a patch is applied.

Exploit

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2020-9757

GHSA-6Q4J-8PJM-5MGC

Affected Products

Seomatic

References · 9

• 🔥 https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt · Exploit
• https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b · Patch
• https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f · Patch
• https://osv.dev/vulnerability/GHSA-6q4j-8pjm-5mgc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9757 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9757 · Vendor Advisory
• https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md · Note
• https://github.com/nystudio107/craft-seomatic · Note
• https://t.me/cvenotify/1316 · Telegram Post