Non évaluée
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elemen...
CVE-2018-14716
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory ha.cker.info
- advisory github.com
- advisory twitter.com
- advisory twitter.com
- patch github.com
- report exploit-db.com