{
  "Name": "CraftCMS SEOmatic component SSTI (CVE-2020-9757)",
  "Description": "The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller.",
  "Product": "CraftCMS SEOmatic component",
  "Homepage": "https://github.com/nystudio107/craft-seomatic",
  "DisclosureDate": "2020-03-04",
  "Author": "ovi3",
  "FofaQuery": "header=\"SEOmatic\"&&header=\"Craft CMS\"",
  "Level": "3",
  "Impact": "",
  "Recommendation": "",
  "References": null,
  "RealReferences": [
    "https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt",
    "https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md",
    "https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b",
    "https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f",
    "https://nvd.nist.gov/vuln/detail/CVE-2020-9757",
    "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9757"
  ],
  "HasExp": true,
  "ExpParams": [
	{
	"name": "phpcode",
	"type": "input",
	"value": "echo md5(123);"
	}
  ],
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": null,
  "CVEIDs": [
    "CVE-2020-9757"
  ],
  "CVSSScore": "7.5",
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  },
  "Disable": false
}