PT-2021-23946 · Solidus · Solidus
Published
2021-12-07
·
Updated
2021-12-08
·
CVE-2021-43805
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Solidus versions prior to 3.1.4
Solidus versions prior to 3.0.4
Solidus versions prior to 2.11.13
Description:
The issue is a denial of service vulnerability that could be exploited during a guest checkout. It is caused by exponential backtracking in the regular expression used to validate a guest order's email, which can occur with email addresses containing fragments like
a.a.. This can lead to the exhaustion of server resources if the email string is made long enough. The maintainers have added a task to check for orders with invalid email addresses.Recommendations:
For versions prior to 3.1.4, update to version 3.1.4 or later.
For versions prior to 3.0.4, update to version 3.0.4 or later.
For versions prior to 2.11.13, update to version 2.11.13 or later.
As a temporary workaround, edit the file
config/application.rb manually by adding the provided code to check email validity. Run the task bin/rails solidus:check orders with invalid email to print information about any affected orders.Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Solidus