PT-2022-19735 · Unknown · Online Market Place Site

N1_X · Published 2022-05-27 · Updated 2022-06-12 · CVE-2022-29627

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Online Market Place Site version 1.0

Description The issue is related to an insecure direct object reference (IDOR) that allows attackers to modify products owned by other sellers.

Recommendations For Online Market Place Site version 1.0, consider restricting access to product modification functionality to prevent unauthorized changes. As a temporary workaround, restrict the ability to modify products to only the product owners until a proper fix is implemented.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2022-29627

Affected Products

Online Market Place Site

References · 4

• 🔥 https://github.com/nsparker1337/OpenSource/blob/main/exploit_idor.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-29627 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29627 · Vendor Advisory
• https://t.me/cvenotify/31477 · Telegram Post