GitHub Advisoryadvisory · Packagist

GHSA-j7fx-v37j-v3w7 Craft CMS Vulnerable to Server-Side Template Injection

HIGH Published 2022-05-13 Modified 2024-04-25 Official page ↗
Aliases
CVE-2018-20465
Ecosystem
Packagist
Packages
craftcms/cms
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1336, CWE-311
Reviewed
2024-04-25

Affected packages

• Packagist craftcms/cms: <= 3.0.34 (no fix yet)

Description

Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a `{%` string for `craft.app.config.DB.user` and `craft.app.config.DB.password` in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.

Related

Alias · CVE (1)

  • CVE-2018-20465 Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as… vulnerability

Weakness · CWE (2)

  • CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine weakness
  • CWE-311 Missing Encryption of Sensitive Data weakness

References