PT-2020-14191 · Solidus · Solidus

Kennyadsl · Published 2020-08-04 · Updated 2021-11-18 · CVE-2020-15109

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Solidus versions prior to 2.8.6 Solidus versions prior to 2.9.6 Solidus versions prior to 2.10.2

Description This issue allows a malicious customer to change the order address without triggering address validations, potentially altering shipment costs. All stores with at least two shipping zones and different costs of shipment per zone are impacted. The problem stems from the structure of checkout permitted attributes, which are applied across the whole checkout process.

Recommendations For versions prior to 2.8.6, update to version 2.8.6 or later. For versions prior to 2.9.6, update to version 2.9.6 or later. For versions prior to 2.10.2, update to version 2.10.2 or later. As a temporary workaround, if it is not possible to upgrade to a supported patched version, consider using the provided gist to patch the store. Restrict access to the ship address attributes parameter in the /checkout/update API endpoint to minimize the risk of exploitation. Avoid using the ship address attributes parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Missing Authorization

RCE

Weakness Enumeration

CWE-862

CWE-20

Related Identifiers

CVE-2020-15109

GHSA-3MVG-RRRW-M7PH

Affected Products

Solidus

References · 9

• 🔥 https://github.com/solidusio/solidus/security/advisories/GHSA-3mvg-rrrw-m7ph · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_frontend/CVE-2020-15109.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_api/CVE-2020-15109.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15109 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15109 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3mvg-rrrw-m7ph · Vendor Advisory
• https://gist.github.com/kennyadsl/4618cd9797984cb64f7700a81bda889d · Patch
• https://github.com/solidusio/solidus · Note
• https://solidus.io/blog/2020/07/16/new-releases.html · Note