PT-2021-23888 · Unknown · Doctrine Dbal

Beberlei · Published 2021-11-16 · Updated 2021-12-15 · CVE-2021-43608

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Doctrine DBAL versions 3.x before 3.1.4

Description The issue allows SQL Injection due to improper casting of offset and length inputs to the generation of a LIMIT clause. This can occur if application developers pass unescaped user input to the DBAL QueryBuilder or any other API that uses the AbstractPlatform::modifyLimitQuery API.

Recommendations For Doctrine DBAL versions 3.x before 3.1.4, update to version 3.1.4 or later to resolve the issue. As a temporary workaround, consider validating and sanitizing user input before passing it to the DBAL QueryBuilder or other affected APIs to minimize the risk of SQL injection.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-43608

GHSA-R7CJ-8HJG-X622

Affected Products

Doctrine Dbal

References · 12

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/dbal/CVE-2021-43608.yaml · Exploit
• https://github.com/doctrine/dbal/commit/9dcfa4cb6c03250b78a84737ba7ceb82f4b7ba4d · Patch
• https://cve.org/CVERecord?id=CVE-2021-43608 · Security Note
• https://osv.dev/vulnerability/GHSA-r7cj-8hjg-x622 · Vendor Advisory
• https://doctrine-project.org/2021/11/11/dbal3-vulnerability-fixed.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43608 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43608 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43608 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-43608 · Vendor Advisory
• https://github.com/doctrine/dbal/security/advisories/GHSA-r7cj-8hjg-x622 · Note
• https://github.com/doctrine/dbal/releases · Note
• https://github.com/doctrine/dbal · Note