CVE-2024-29686 - Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components

Back Back to CVE browser

HIGH

Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components

Published Mar 29, 2024

8.7

HIGH

CVSS 4.0

EPSS 1.82%

Description

Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components. NOTE: the vendor disputes this because the payload could only be entered by a trusted user, such as the owner of the server that hosts Winter CMS, or a developer working for them.

Affected products

Vendor Wintercms Product Winter Default
unknown
Affected
- 1.2.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Wintercms	Winter	unknown	Affected 1.2.3

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-75

CWE-97

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0880
Advisory
https://forum.ksec.co.uk/t/webapps-winter-cms-1-2-3-server-side-template-injection-ssti-authenticated/2779
Third Party Advisory
https://github.com/advisories/GHSA-8r5j-gm3j-cx9c
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-29686
https://wintercms.com/docs/v1.2/docs/cms/themes#template-structure
Product
https://www.exploit-db.com/exploits/51893
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0880		Advisory
https://forum.ksec.co.uk/t/webapps-winter-cms-1-2-3-server-side-template-injection-ssti-authenticated/2779		Third Party Advisory
https://github.com/advisories/GHSA-8r5j-gm3j-cx9c		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-29686
https://wintercms.com/docs/v1.2/docs/cms/themes#template-structure		Product
https://www.exploit-db.com/exploits/51893		ExploitThird Party Advisory