https://vulnerability.circl.lu/sightings/feed 2026-07-16T22:26:57.758712+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/aafbe605-c19c-4a8f-9b7f-6bd0dad3432c/export 2026-07-16T22:26:57.766610+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aafbe605-c19c-4a8f-9b7f-6bd0dad3432c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7JVP-HJ45-2F2M", "type": "seen", "source": "https://gist.github.com/alon710/3392c028816ef9767631ce548afd9d91", "content": "# GHSA-7JVP-HJ45-2F2M: GHSA-7jvp-hj45-2f2m: Scriban Template Writes to Arbitrary CLR Properties via TypedObjectAccessor\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/GHSA-7JVP-HJ45-2F2M\n\n## Summary\nAn improper access control and mass assignment vulnerability in Scriban allows templates to write to arbitrary, restricted CLR properties (including private, internal, and init-only properties) of context-bound objects, causing unexpected state mutations on the host application heap.\n\n## TL;DR\nScriban dynamically resolves and modifies restricted C# object properties (private, internal, init) within templates, bypassing language-level access controls and enabling mass assignment attacks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-284, CWE-915\n- **Attack Vector**: Network / Context Template Injection\n- **CVSS v4 Score**: 7.7\n- **Exploit Status**: poc\n- **CISA KEV Status**: Not Listed\n- **Impact**: Improper Access Control / State Mutation\n\n## Affected Systems\n\n- Scriban Template Engine\n- **Scriban**: <= 7.2.1 (Fixed in: `7.2.2`)\n\n## Mitigation\n\n- Upgrade Scriban NuGet package to version 7.2.2 or later\n- Implement a strict, custom MemberFilter to restrict write operations\n- Avoid binding untrusted or multi-use CLR objects directly to the template context\n\n**Remediation Steps:**\n1. Identify all applications using Scriban <= 7.2.1\n2. Update the package reference in .csproj to 7.2.2\n3. Verify all Custom MemberFilters are configured correctly\n4. Audit templates for assignments targeting internal fields\n\n## References\n\n- [GitHub Security Advisory](https://github.com/scriban/scriban/security/advisories/GHSA-7jvp-hj45-2f2m)\n- [.NET API Documentation - PropertyInfo.SetValue Reference](https://learn.microsoft.com/dotnet/api/system.reflection.propertyinfo.setvalue)\n- [C# Language Specification - Init Accessors](https://learn.microsoft.com/dotnet/csharp/language-reference/proposals/csharp-9.0/init)\n- [CWE-915 Reference](https://cwe.mitre.org/data/definitions/915.html)\n- [CWE-284 Reference](https://cwe.mitre.org/data/definitions/284.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-7JVP-HJ45-2F2M) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T17:41:59.860799Z"} 2026-07-06T17:41:59.860799+00:00