PT-2018-4218 · Opencart · Opencart

Published 2018-03-20 · Updated 2019-04-25 · CVE-2014-3990

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenCart versions 1.5.6.4 and earlier

Description The issue allows remote attackers to conduct server-side request forgery (SSRF) attacks or possibly conduct XML External Entity (XXE) attacks and execute arbitrary code via a crafted serialized PHP object. This is related to the quantity parameter in an update request.

Recommendations For OpenCart versions 1.5.6.4 and earlier, as a temporary workaround, consider restricting access to the Cart::getProducts method until a patch is available. Avoid using the quantity parameter in update requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XXE

SSRF

Weakness Enumeration

CWE-611

CWE-918

Related Identifiers

CVE-2014-3990

Affected Products

Opencart

References · 8

• 🔥 http://karmainsecurity.com/KIS-2014-08 · Exploit
• 🔥 http://securityfocus.com/archive/1/532763/100/0/threaded · Exploit
• 🔥 http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Jul/67 · Exploit
• https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-3990 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3990 · Note
• http://securityfocus.com/bid/68529 · Note