CyberRota Analysis
AI-GeneratedDocsGPT versions 0.15.0 and earlier are vulnerable due to a lack of input sanitization in their custom prompt feature, which allows unauthenticated attackers to inject malicious Jinja template expressions. This server-side template injection (SSTI) vulnerability can be exploited to execute arbitrary code on the server, potentially leading to full remote code execution (RCE). Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attacker can inject malicious template expressions, leading to a server-side template injection (SSTI) vulnerability that can be exploited to achieve full remote code execution (RCE).