{"id":"CVE-2023-30145","published":"2023-05-26T00:00:00Z","modified":"2025-01-16T16:18:14Z","title":"Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats…","vendor":null,"product":null,"tier":"tail","description":{"text":"Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.45858,"percentile":0.98803,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://portswigger.net/research/server-side-template-injection","tags":[]},{"url":"https://book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection","tags":[]},{"url":"https://drive.google.com/file/d/11MsSYqUnDRFjcwbQKJeL9Q8nWpgVYf2r/view?usp=share_link","tags":[]},{"url":"https://github.com/paragbagul111/CVE-2023-30145","tags":[]},{"url":"http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html","tags":[]}],"priority":{"score":31.6,"factors":[{"name":"EPSS percentile","points":19.76},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.86}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2023-05-26"},"pocGithub":{"count":1,"skipped":0,"earliest":"2023-05-25","earliestUrl":"https://github.com/paragbagul111/CVE-2023-30145","repos":[{"name":"paragbagul111/CVE-2023-30145","url":"https://github.com/paragbagul111/CVE-2023-30145","stars":7,"created":"2023-05-25"}]},"first":{"date":"2023-05-25","source":"PoC-in-GitHub","url":"https://github.com/paragbagul111/CVE-2023-30145"},"provenance":"source"},"affected":[{"ecosystem":"RubyGems","package":"camaleon_cms","vulnerableRanges":["<2.7.4"],"patched":["2.7.4"],"from":["GHSA-x487-866m-p8hr"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1646","exploited":false,"provenance":"source"},"exploits":[{"id":51489,"url":"https://www.exploit-db.com/exploits/51489","title":"Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)","date":"2023-05-26","verified":true,"provenance":"source"}],"exploitRefs":["http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html"],"lineage":{"familyId":"fam-owen2345-camaleon-cms-cve-2023-30145","children":[{"from":"CVE-2023-30145","to":"CVE-2024-46987","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"RubyGems:camaleon_cms","fromFixed":"2.7.4","toFixed":"2.8.1","daysApart":481},{"kind":"same-code","provenance":"machine","files":["app/controllers/camaleon_cms/admin/media_controller.rb"],"commits":["https://github.com/owen2345/camaleon-cms/commit/4485788c544eb1aae52ca613bd9626129e3df6ee","https://github.com/owen2345/camaleon-cms/commit/071b1b09d6d61ab02a5960b1ccafd9d9c2155a3e"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2021-25970","published":"2021-10-20","fixed":"2.6.0.1","kev":false},{"cve":"CVE-2021-25971","published":"2021-10-20","fixed":"2.6.0.1","kev":false},{"cve":"CVE-2021-25972","published":"2021-10-20","fixed":"2.6.0.1","kev":false},{"cve":"CVE-2023-30145","published":"2023-05-26","fixed":"2.7.4","kev":false},{"cve":"CVE-2024-46986","published":"2024-09-18","fixed":"2.8.1","kev":false},{"cve":"CVE-2024-46987","published":"2024-09-18","fixed":"2.8.1","kev":false},{"cve":"CVE-2025-2304","published":"2025-03-14","fixed":"2.9.1","kev":false}],"package":"RubyGems:camaleon_cms"}}