YSaxon/pyrocms-ssti-fix

PoC

A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation

view exploit source poc_in_githubauthor YSaxonpublished 2026-01-09catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-29689US	critical9.8	53.5% (99th)	Exploit	2023-08-04
PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.