CVE-2020-9757 SEOmatic for CraftCMS allows Server-Side Template Injection
Attackers can execute arbitrary code via Server-Side Template Injection in the SEOmatic plugin for Craft CMS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-9757?
CVE-2020-9757 is a critical code injection vulnerability in Craftcms Craft Cms, published on 4 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller.
Weakness: CWE-74
Which versions are affected by CVE-2020-9757?
2 open source packages ship an affected version, including nystudio107/craft-seomatic. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nystudio107/craft-seomatic Packagist | All versions | 3.3.0 |
nystudio107/craft-seomatic Packagist | All versions | 3.3.0 |
Products include Craftcms Craft Cms.
How do I fix CVE-2020-9757?
Upgrade nystudio107/craft-seomatic to 3.3.0 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2020-9757 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-9757 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Craftcms Craft Cms
Sources
Also known as GHSA-6q4j-8pjm-5mgc.