PT-2022-20559 · Valinor · Valinor

Published 2022-07-11 · Updated 2022-07-16 · CVE-2022-31140

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Valinor versions prior to 0.12.0

Description Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use Throwable#getMessage() when it should not have permission to do so. This is a problem with cases such as an SQL exception showing an SQL snippet, a database connection exception showing database IP address/username/password, or a timeout detail / out of memory detail. Attackers could use this information for potential data exfiltration, denial of service attacks, enumeration attacks, etc.

Recommendations For versions prior to 0.12.0, update to version 0.12.0 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information that could be exposed through Throwable#getMessage(). Avoid using Throwable#getMessage() in cases where sensitive information could be revealed, such as SQL exceptions or database connection exceptions.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-209

CWE-200

Related Identifiers

CVE-2022-31140

GHSA-5PGM-3J3G-2RC7

Affected Products

Valinor

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31140.json · Exploit
• 🔥 https://github.com/CuyZ/Valinor/security/advisories/GHSA-5pgm-3j3g-2rc7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31140 · Security Note
• https://osv.dev/vulnerability/GHSA-5pgm-3j3g-2rc7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31140 · Vendor Advisory
• https://github.com/CuyZ/Valinor · Note
• https://github.com/CuyZ/Valinor/releases/tag/0.12.0 · Note
• https://t.me/cvenotify/32910 · Telegram Post
• https://t.me/cibsecurity/45947 · Telegram Post