Vulnerability · Published May 11, 2020 · Assigned by mitre
CVE-2020-12790
High 7.5
In plain English
A high-severity security flaw in the nystudio107/craft-seomatic package (Packagist). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.2%top 17.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | nystudio107/craft-seomatic | 3.2.49 | GHSA-23q7-59jj-2pj4 |
Affected products (as reported)
References
- https://github.com/nystudio107/craft-seomatic/releases/tag/3.2.49 x_refsource_MISC
- https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md#3249---20200324 x_refsource_MISC
- https://isec.pl/en/vulnerabilities/isec-0028-seomatic-ssti-23032020.txt x_refsource_MISC
- https://github.com/nystudio107/craft-seomatic/commit/82f4a25b28fd622393da6592dc9e5ccee7fc5be3#diff-52fd042c50432133a00a8f840f4a6165 x_refsource_MISC