PT-2022-13535 · Saleor · Saleor

Published 2022-03-11 · Updated 2023-06-29 · CVE-2022-0932

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions saleor versions prior to 3.1.2

Description The issue concerns a missing authorization in the saleor repository. This problem allows for improper authorization.

Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-0932

GHSA-MCGW-5FHW-3FQ8

Affected Products

Saleor

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0932.json · Exploit
• 🔥 https://huntr.dev/bounties/88ae4cbc-c697-401b-8b04-7dc4e03ad8eb · Exploit
• https://github.com/saleor/saleor/commit/521dfd6394f3926a77c60d8633c058e16d0f916d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0932 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0932 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mcgw-5fhw-3fq8 · Vendor Advisory
• https://github.com/saleor/saleor · Note
• https://t.me/cibsecurity/38792 · Telegram Post