PT-2019-15534 · Cezerin · Cezerin

Publicado 2019-10-29 · Atualizado 2022-05-24 · CVE-2019-18608

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cezerin version 0.33.0

Description The issue allows unauthorized modification of order information because internal attributes can be overwritten via conflicting names when processing order requests. A malicious customer can manipulate an order, such as its payment status or shipping fee, by adding additional attributes to user-input during the PUT "/ajax/cart" operation for a checkout. This is due to the getValidDocumentForUpdate function in api/server/services/orders/orders.js.

Recommendations For Cezerin version 0.33.0, as a temporary workaround, consider restricting access to the getValidDocumentForUpdate function in api/server/services/orders/orders.js until a patch is available. Avoid using the PUT "/ajax/cart" operation for checkout without proper validation of user-input attributes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-18608

GHSA-6PQ6-CRW9-522H

Produtos afetados

Cezerin

Referências · 5

• 🔥 https://github.com/cl0udz/vulnerabilities/blob/master/cezerin-manipulate_order_information/README.md · Exploit
• https://github.com/cezerin/cezerin · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18608 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-6pq6-crw9-522h · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18608 · Aviso do Fabricante