Server-side Template Injection in nystudio107/craft-seomatic

2022-03-1200:00:34

Google

osv.dev

0.003 Low

EPSS

Percentile

70.3%

JSON

A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic prior to 3.4.12 in src/helpers/UrlHelper.php via the host header.

CPENameOperatorVersion
nystudio107/craft-seomaticeq3.1.1
nystudio107/craft-seomaticeq3.2.25
nystudio107/craft-seomaticeq3.3.36
nystudio107/craft-seomaticeq3.0.0-beta.15
nystudio107/craft-seomaticeq3.1.14
nystudio107/craft-seomaticeq3.1.47
nystudio107/craft-seomaticeq3.3.3
nystudio107/craft-seomaticeq3.3.35
nystudio107/craft-seomaticeq3.0.25
nystudio107/craft-seomaticeq3.1.3

Name	Operator	Version
nystudio107/craft-seomatic	eq	3.1.1
nystudio107/craft-seomatic	eq	3.2.25
nystudio107/craft-seomatic	eq	3.3.36
nystudio107/craft-seomatic	eq	3.0.0-beta.15
nystudio107/craft-seomatic	eq	3.1.14
nystudio107/craft-seomatic	eq	3.1.47
nystudio107/craft-seomatic	eq	3.3.3
nystudio107/craft-seomatic	eq	3.3.35
nystudio107/craft-seomatic	eq	3.0.25
nystudio107/craft-seomatic	eq	3.1.3