Lucene search
Veracode Vulnerability DatabaseVERACODE:22635HistoryMar 05, 2020 - 4:28 a.m.
Server-Side Template Injection (SSTI)
2020-03-0504:28:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.962 High
EPSS
Percentile
99.5%
nystudio107/craft-seomatic is vulnerable to server-side template injection. Lack of validation and sanitization allows an attacker to inject and execute arbitrary template variables that can lead to code execution via malicious data to the metacontainers controller.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nystudio107/craft-seomatic | le | 3.2.45 | |
| nystudio107/craft-seomatic | le | 3.2.45 |
Related
attackerkb
attackerkb
CVE-2020-9757
2020-03-04 00:00:00
nvd
nvd
CVE-2020-9757
2020-03-04 17:15:12
github
github
SEOmatic for CraftCMS allows Server-Side Template Injection
2022-05-24 17:10:09
prion
prion
Sql injection
2020-03-04 17:15:00
osv
osv
SEOmatic for CraftCMS allows Server-Side Template Injection
2022-05-24 17:10:09
CVE-2020-9757
2020-03-04 17:15:12
nuclei
nuclei
Craft CMS < 3.3.0 - Server-Side Template Injection
2020-07-03 17:56:51
cvelist
cvelist
CVE-2020-9757
2020-03-04 16:03:22
cve
cve
CVE-2020-9757
2020-03-04 17:15:12
checkpoint_advisories
checkpoint_advisories
Craft CMS Command Injection (CVE-2020-9757)
2022-10-06 00:00:00
impervablog
impervablog