Description (CNA)
Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administrators to achieve arbitrary OS command execution by injecting Twig expressions into mail templates. Attackers can exploit the unsandboxed Twig environment in TwigView::render(), which lacks SandboxExtension or a SecurityPolicy, to inject malicious expressions such as filter('system') into mail template bodies stored unsanitized in the database, causing automatic payload execution on each subsequent application event that triggers a mail dispatch.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| microweber / microweber | affected 0 through 2.0.20 |
CWE
CWE-94
References
- https://gist.github.com/W40X/584f4b088d310bc5280cc74bbf97831a
- https://www.vulncheck.com/advisories/microweber-cms-server-side-template-injection-via-mail-templates
ADP enrichment
No English description supplied.
No references supplied.