What is CVE-2020-9757?

CVE-2020-9757 is a vulnerability in the Seomatic component before version 3.2.46 for Craft CMS that allows Server-Side Template Injection and information disclosure.

How severe is CVE-2020-9757?

CVE-2020-9757 has a severity rating of 9.8 out of 10, which is considered critical.

How does CVE-2020-9757 work?

CVE-2020-9757 allows an attacker to inject malicious code into server-side templates and can lead to unauthorized access and information disclosure.

Is there a fix for CVE-2020-9757?

Yes, updating to version 3.3.0 or later of the Seomatic component for Craft CMS remedies the CVE-2020-9757 vulnerability.

Where can I find more information about CVE-2020-9757?

You can find more information about CVE-2020-9757 at the official NIST vulnerability database and the GitHub commits for the Craft CMS Seomatic component.

Vulnerability/
CVE-2020-9757

critical

9.8

CWE

4/3/2020

24/5/2022

4/8/2024

CVE-2020-9757

First published: Wed Mar 04 2020(Updated: )

The Seomatic component before 3.2.46 for Craft CMS allows Server-Side Template Injection and information disclosure via malformed data to the metacontainers controller.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Craftcms Craft Cms	<3.3.0

Remedy

https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b

Remedy

https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-9757?
CVE-2020-9757 is a vulnerability in the Seomatic component before version 3.2.46 for Craft CMS that allows Server-Side Template Injection and information disclosure.
How severe is CVE-2020-9757?
CVE-2020-9757 has a severity rating of 9.8 out of 10, which is considered critical.
How does CVE-2020-9757 work?
CVE-2020-9757 allows an attacker to inject malicious code into server-side templates and can lead to unauthorized access and information disclosure.
Is there a fix for CVE-2020-9757?
Yes, updating to version 3.3.0 or later of the Seomatic component for Craft CMS remedies the CVE-2020-9757 vulnerability.
Where can I find more information about CVE-2020-9757?
You can find more information about CVE-2020-9757 at the official NIST vulnerability database and the GitHub commits for the Craft CMS Seomatic component.

collector/github-advisory-latest
alias/GHSA-6q4j-8pjm-5mgc
alias/CVE-2020-9757
collector/github-advisory
collector/nvd-index
collector/nvd-cve
agent/author
agent/type
agent/remedy
agent/references
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/trending
package-manager/composer
vendor/craftcms
canonical/craftcms craft cms

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.