CyberRota Analysis
AI-GeneratedMicroweber CMS versions up to 2.0.20 are vulnerable to a server-side template injection that allows authenticated administrators to execute arbitrary OS commands through unsanitized Twig expressions in mail templates. This vulnerability can lead to automatic execution of malicious payloads during mail dispatch events, posing a significant risk to system integrity and data security. Organizations using this CMS should prioritize patching this vulnerability to mitigate potential exploitation by attackers.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administrators to achieve arbitrary OS command execution by injecting Twig expressions into mail templates. Attackers can exploit the unsandboxed Twig environment in TwigView::render(), which lacks SandboxExtension or a SecurityPolicy, to inject malicious expressions such as filter('system') into mail template bodies stored unsanitized in the database, causing automatic payload execution on each subsequent application event that triggers a mail dispatch.