PT-2021-19932 · Woocommerce · Woocommerce-Gutenberg-Products-Block

Josh · Published 2021-07-26 · Updated 2021-10-28 · CVE-2021-32789

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions woocommerce-gutenberg-products-block versions 2.5.0 through 2.5.15

Description An SQL injection issue affects WooCommerce sites running the WooCommerce Blocks feature plugin. This can be exploited via a carefully crafted URL against the "wc/store/products/collection-data?calculate attribute counts[][taxonomy]" endpoint, allowing the execution of a read-only SQL query.

Recommendations For versions 2.5.0 through 2.5.15, upgrade to version 2.5.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wc/store/products/collection-data?calculate attribute counts[][taxonomy]" endpoint until a patch is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-32789

GHSA-6HQ4-W6WV-8WRP

Affected Products

Woocommerce-Gutenberg-Products-Block

References · 11

• 🔥❌ https://github.com/andnorack/CVE-2021-32789 · Exploit, Deleted
• https://github.com/woocommerce/woocommerce-gutenberg-products-block/security/advisories/GHSA-6hq4-w6wv-8wrp · Patch
• https://woocommerce.com/posts/critical-vulnerability-detected-july-2021 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32789 · Security Note
• https://hackerone.com/reports/1260787 · Note
• https://t.me/cvenotify/18726 · Telegram Post
• https://t.me/cibsecurity/26495 · Telegram Post
• https://t.me/cybersecuritytechnologies/4617 · Telegram Post
• https://wooengineering.wordpress.com/2021/07/14/incident-report-sql-injection-via-store-api · Note
• ❌ https://github.com/woocommerce/woocommerce-gutenberg-products-block-ghsa-6hq4-w6wv-8wrp/pull/1 · Note, Deleted