CVE-2023-30179

CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI). An authenticated attacker can inject Twig Template to User Photo Location field when setting User Photo Location in User Settings, lead to Remote Code Execution. NOTE: the vendor disputes this because only Administrators can add this Twig code, and (by design) Administrators are allowed to do that by default.

• CWE-94
• CWE-94

• https://datnlq.gitbook.io/cve/craft-cms/cve-2023-30179-server-side-template-injectionExploit, Third Party Advisory
• https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#442---2023-03-14Release Notes
• https://github.com/github/advisory-database/pull/2443#issuecomment-1610040714
• https://github.com/github/advisory-database/pull/2443#issuecomment-1610634200
• https://datnlq.gitbook.io/cve/craft-cms/cve-2023-30179-server-side-template-injectionExploit, Third Party Advisory
• https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#442---2023-03-14Release Notes
• https://github.com/github/advisory-database/pull/2443#issuecomment-1610040714
• https://github.com/github/advisory-database/pull/2443#issuecomment-1610634200

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30153An SQL injection vulnerability in the Payplug (payplug) modu…9.8
• CVE-2023-30154Multiple improper neutralization of SQL parameters in module…9.8
• CVE-2023-3016A vulnerability was found in yiwent Vip Video Analysis 1.0 a…6.1
• CVE-2023-3017A vulnerability was found in SourceCodester Lost and Found I…5.4
• CVE-2023-30172A directory traversal vulnerability in the /get-artifact API…7.5
• CVE-2023-30177CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An…6.1
• CVE-2023-3018A vulnerability was found in SourceCodester Lost and Found I…8.8
• CVE-2023-30183Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-30184A stored cross-site scripting (XSS) vulnerability in Typecho…5.4
• CVE-2023-30185CRMEB v4.4 to v4.6 was discovered to contain an arbitrary fi…9.8
• CVE-2023-30186A use after free issue discovered in ONLYOFFICE DocumentServ…9.8
• CVE-2023-30187An out of bounds memory access vulnerability in ONLYOFFICE D…9.8