Server-Side Template Injection in Camaleon CMS

🗓️ 26 May 2023 15:30:21Reported by GitHub Advisory DatabaseType

Server-Side Template Injection in Camaleon CMS prior to 2.7.4 via the `formats` paramete

Reporter	Title	Published	Views	Family All 20
0day.today	Camaleon CMS v2.7.0 - Server-Side Template Injection Vulnerability	27 May 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Tuzitio Camaleon_Cms	25 May 202312:35	–	githubexploit
GithubExploit	Exploit for Code Injection in Tuzitio Camaleon_Cms	25 May 202312:35	–	githubexploit
ATTACKERKB	CVE-2023-30145	26 May 202315:15	–	attackerkb
Circl	CVE-2023-30145	26 May 202300:00	–	circl
CNNVD	CamaleonCMS 代码注入漏洞	26 May 202300:00	–	cnnvd
CVE	CVE-2023-30145	26 May 202300:00	–	cve
Cvelist	CVE-2023-30145	26 May 202300:00	–	cvelist
Exploit DB	Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)	26 May 202300:00	–	exploitdb
NVD	CVE-2023-30145	26 May 202315:15	–	nvd

Vulners

Node

tuzitio camaleon_cmsRange<2.7.4rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30145
book	www.book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection
drive	www.drive.google.com/file/d/11MsSYqUnDRFjcwbQKJeL9Q8nWpgVYf2r/view
github	www.github.com/paragbagul111/CVE-2023-30145
portswigger	www.portswigger.net/research/server-side-template-injection
github	www.github.com/owen2345/camaleon-cms/issues/1052
github	www.github.com/owen2345/camaleon-cms/commit/4485788c544eb1aae52ca613bd9626129e3df6ee
github	www.github.com/owen2345/camaleon-cms/releases/tag/2.7.4
packetstormsecurity	www.packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2023-30145.yml

12 Nov 2023 05:01Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.45858

SSVC