Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI)…
Priority HIGH 82CWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-94.
Summary
Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.45858 98th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by NVD
Fix Fixed camaleon_cms (RubyGems): 2.7.4
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | camaleon_cms (RubyGems) | before 2.7.4 | 2.7.4 | Patch available | GHSA-x487-866m-p8hr |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- camaleon_cms (RubyGems) Vendor— Affected before 2.7.4 Fixed in 2.7.4 Patch available GHSA-x487-866m-p8hr
Remediation
- Fix · GHSA-x487-866m-p8hr camaleon_cms (RubyGems) Fixed in 2.7.4 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2023-30145
- 2026-10-03 Alias added: GHSA-x487-866m-p8hr
References
Exploit 4
- https://book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection
- https://drive.google.com/file/d/11MsSYqUnDRFjcwbQKJeL9Q8nWpgVYf2r/view?usp=share_link
- https://github.com/paragbagul111/CVE-2023-30145
- http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html
Other 6
- https://portswigger.net/research/server-side-template-injection
- https://github.com/owen2345/camaleon-cms/issues/1052
- https://github.com/owen2345/camaleon-cms/commit/4485788c544eb1aae52ca613bd9626129e3df6ee
- https://github.com/owen2345/camaleon-cms
- https://github.com/owen2345/camaleon-cms/releases/tag/2.7.4
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2023-30145.yml
More owen2345 Camaleon Cms vulnerabilities
- TI-2024-31375 Arbitrary file write leading to RCE in Camaleon CMS CVSS 3.1CRITICAL 10.0
- TI-2021-07976 Camaleon CMS - Insufficient Session Expiration after Password Change CVSS 3.1HIGH 8.8
- TI-2024-31376 Arbitrary path traversal in Camaleon CMS CVSS 3.1HIGH 7.7
- TI-2021-07975 Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments CVSS 3.1MEDIUM 6.1
- TI-2021-07978 Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature CVSS 3.1MEDIUM 4.9
- TI-2024-32457 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to… CVSS 3.1MEDIUM 4.8
Sources
- CVE-2023-30145 · CVE Program
- CVE-2023-30145 · NVD
- FIRST EPSS
- GHSA-x487-866m-p8hr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences