CVE-2023-36210
Published: 01 August 2023
Summary
CVE-2023-36210 is a critical-severity Injection (CWE-74) vulnerability in Motocms Motocms. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 6.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
MotoCMS version 3.4.3 contains a server-side template injection vulnerability in the Store Category Template that is triggered through the keyword parameter. The flaw is tracked as CVE-2023-36210, carries a CVSS 3.1 score of 9.8, and is classified under CWE-74. It allows an unauthenticated network attacker to supply template expressions that are evaluated on the server.
Because the attack requires no credentials or user interaction, an adversary can submit a crafted keyword value and obtain arbitrary code execution, resulting in full confidentiality, integrity, and availability impact on the affected installation. Public exploit code for this issue has been available on Exploit-DB since shortly after disclosure.
The EPSS score for the CVE has remained flat at 0.1057 with no material upward trajectory after publication, indicating that exploitation interest has not increased measurably beyond the initial disclosure window. No vendor advisory or patch information is referenced in the available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-40187
Vulnerability details
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Developer assessments and testing (including injection-focused techniques) identify improper neutralization of special elements, and the verifiable flaw remediation corrects them pre-deployment.
Identifies indicators of injection attacks (command, SQL, LDAP, etc.) via anomaly and attack monitoring.