PT-2023-14046 · Oro · Oroplatform

Dkhrysev · Publicado 2023-11-27 · Atualizado 2023-12-04 · CVE-2022-41951

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OroPlatform versions prior to 5.0.9

Description Path Traversal is possible in OroBundleGaufretteBundleFileManager::getTemporaryFileName. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. The file will be deleted immediately after the script ends.

Recommendations For versions prior to 5.0.9, apply the provided patch to OroBundleGaufretteBundleFileManager.php or decorate OroBundleGaufretteBundleFileManager::getTemporaryFileName in your customization and clear the $suggestedFileName argument to prevent Path Traversal. Alternatively, update to version 5.0.9 or later, where this vulnerability has been fixed.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2022-41951

GHSA-9V3J-4J64-P937

Produtos afetados

Oroplatform

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41951.json · Exploit
• https://github.com/oroinc/platform · Nota
• https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-41951 · Nota de Segurança
• https://t.me/cvenotify/62155 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-9v3j-4j64-p937 · Aviso do Fabricante
• https://t.me/cvenotify/61276 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-41951 · Aviso do Fabricante