En resumen
- CVE-2018-14716 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a nystudio107/craft-seomatic, seomatic (nystudio107).
- Probabilidad de explotación en los próximos 30 días (EPSS): 32.7%, mayor que el 98.3% de las vulnerabilidades.
- Solución: actualizar a 3.1.4 o posterior.
Description
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
NVD description
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
Más vulnerabilidades de nystudio107/craft-seomatic
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free