CyberRota Analysis
AI-GeneratedSilverstripe Advanced Workflow versions prior to 6.4.5, 7.1.3, and 7.2.1 are vulnerable to a server-side template injection that allows an authenticated attacker with permission to modify the email template to execute arbitrary PHP code on the server. This vulnerability poses a high risk, as it can lead to complete server compromise. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate. When NotifyUsersWorkflowAction renders the field through the Silverstripe template engine SSTemplateParser, the payload can cause PHP evaluation and arbitrary code execution on the server; the regression coverage is in tests/php/WorkflowEngineTest.php. This issue is fixed in versions 6.4.5, 7.1.3, and 7.2.1.