CVE-2022-37767

{"id": "CVE-2022-37767", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-09-12T14:15:09.110", "references": [{"url": "https://github.com/PebbleTemplates/pebble/issues/625#issuecomment-1282138635", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/Y4tacker/Web-Security/issues/3", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/PebbleTemplates/pebble/issues/625#issuecomment-1282138635", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/Y4tacker/Web-Security/issues/3", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus either the input should not arrive from an untrusted source, or else the application using the engine should apply restrictions to the input. The engine is not responsible for validating the input."}, {"lang": "es", "value": "** EN DISPUTA ** Pebble Templates versi\u00f3n 3.1.5, permite a atacantes omitir un mecanismo de protecci\u00f3n e implementar una ejecuci\u00f3n de c\u00f3digo arbitrario con springbok. NOTA: el proveedor discute esto porque la entrada al motor de plantillas de Pebble est\u00e1 pensada para incluir c\u00f3digo Java arbitrario, y por lo tanto, o bien la entrada no deber\u00eda llegar de una fuente no fiable, o bien la aplicaci\u00f3n que utiliza el motor deber\u00eda aplicar restricciones a la entrada. El motor no es responsable de validar la entrada"}], "lastModified": "2024-11-21T07:15:07.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pebbletemplates:pebble_templates:3.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A45A63E-6BB7-4C65-9557-4516199DE5C9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}