CVE-2023-22621

CVE-2023-22621 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including sofianeelhor. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional Python-based exploit for CVE-2023-22621, which leverages Server-Side Template Injection (SSTI) in Strapi's email template functionality to achieve Remote Code Execution (RCE). The exploit automates the process of injecting a malicious payload into the email template and triggering its execution via user registration.

Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution.