CVE-2018-20465

EUVD-2022-4303 · Published May 13, 2022

Craft CMS Vulnerable to Server-Side Template Injection Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a `{%` string for `craft.app.config.DB.user` and `craft.app.config.DB.password` in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.

Technologies

Craftcms Craft CmsCraftcms Cms

Weaknesses

CWE-311CWE-1336

CVSS scores

v3.07.2CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Credential Access Discovery Collection

T1190Exploit Public-Facing Application T1005Data from Local System T1040Network Sniffing T1056.004Credential API Hooking T1111Multi-Factor Authentication Interception T1539Steal Web Session Cookie T1552.004Private Keys

References

Potentially impacted assets

See if this affects your attack surface