SSTI in WGDashboard Allows Root Code Execution

Executive Summary

This is a Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier. It allows authenticated attackers to inject malicious code into server-side templates, which can be executed with root privileges.

Useful 0 Not Useful 0

Detection Guidance

To detect SSTI in WGDashboard, check for user input reflected in templates without proper sanitization. Inspect HTTP responses for template expressions like {{7*7}} or ${7*7}. Review server logs for unusual template-related errors or code execution attempts. Verify if authenticated users can inject payloads triggering remote code execution.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to execute arbitrary code on the server, potentially gaining full control over the system. This could lead to data theft, system compromise, or disruption of services.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face legal penalties and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade WGDashboard to a version later than 4.3.2 to address the SSTI vulnerability. Ensure all authenticated users have minimal necessary privileges to reduce attack surface.

Useful 0 Not Useful 0