CyberRota Analysis
AI-GeneratedCamaleonCMS 2.9.1 is vulnerable to a server-side template injection that allows authenticated administrators to execute arbitrary commands by manipulating the email parameter in the test_email settings action. This vulnerability can lead to arbitrary command execution within the Rails process context, posing a significant risk to system integrity. Organizations using this CMS should prioritize patching or mitigating this vulnerability to protect against potential exploitation by malicious insiders or compromised admin accounts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the test_email settings action, which are evaluated when an SMTP rejection reflects the recipient address back in the exception message rendered as an inline ERB template. Attackers can submit a crafted email parameter containing ERB expressions through the admin settings test_email endpoint, causing the Rails inline template renderer to evaluate attacker-controlled Ruby code and achieve arbitrary command execution as the Rails process user.