PT-2022-12002 · Pagekit · Pagekit

Published 2022-04-01 · Updated 2022-04-08 · CVE-2021-44135

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pagekit all versions

Description The issue concerns SQL Injection via Comment listing. Pagekit, a modular and lightweight CMS built with Symfony components and Vue.js, has a vulnerability in its SettingsController, specifically in the configAction that handles the order of comments listing. The allowed options, ASC and DESC, are concatenated directly to the SQL query without proper sanitization, leading to the SQL Injection vulnerability.

Recommendations For all versions, consider disabling the comment listing feature or restricting access to the SettingsController until a patch is available. As a temporary workaround, avoid using the configAction in SettingsController to set the order of comments listing. Restrict access to the vulnerable SQL query to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-44135

GHSA-45HC-R4FJ-QJ89

Affected Products

Pagekit

References · 6

• 🔥 https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44135 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44135 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-45hc-r4fj-qj89 · Vendor Advisory
• https://github.com/pagekit/pagekit · Note
• https://t.me/cibsecurity/40004 · Telegram Post