Unrated
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elemen...
CVE-2018-14716
First seen on SecPulse
Original description The description as published by the source.
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory ha.cker.info
- advisory github.com
- advisory twitter.com
- advisory twitter.com
- patch github.com
- report exploit-db.com