PT-2021-23966 · Sulu · Sulu

Alexander-Schranz · Published 2021-12-15 · Updated 2021-12-21 · CVE-2021-43835

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Sulu versions 2.0.0-RC1 through 2.2.17 Sulu versions 2.3.0 through 2.3.7 Sulu versions 2.4.0 before the patch

Description: Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions, Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API, it was possible for them to give themselves permissions to areas which they did not already have. This issue was introduced with the new ProfileController putAction. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations: For Sulu versions 2.0.0-RC1 through 2.2.17, update to version 2.2.18 or later. For Sulu versions 2.3.0 through 2.3.7, update to version 2.3.8 or later. For Sulu version 2.4.0, apply the patch to the ProfileController manually until a patched version is available. As a temporary workaround, consider patching the ProfileController of affected Sulu versions by overwriting it.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-43835

GHSA-84PX-Q68R-2FC9

Affected Products

Sulu

References · 7

• https://github.com/sulu/sulu/commit/30bf8b5a4f83b6f2171a696011757d095edaa28a · Patch
• https://osv.dev/vulnerability/CVE-2021-43835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43835 · Security Note
• https://osv.dev/vulnerability/GHSA-84px-q68r-2fc9 · Vendor Advisory
• https://github.com/sulu/sulu · Note
• https://github.com/sulu/sulu/security/advisories/GHSA-84px-q68r-2fc9 · Note
• https://t.me/cvenotify/24696 · Telegram Post