PT-2022-26109 · Ez Systems · Ezplatform-Graphql

Philippe Tranca + 1 · Published 2022-11-10 · Updated 2022-11-15 · CVE-2022-41876

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ezplatform-graphql versions prior to 1.0.13 ezplatform-graphql versions prior to 2.3.12

Description The issue concerns the exposure of password hashes of users who have created or modified content, typically administrators and editors, through unauthenticated GraphQL queries for user accounts. This is due to insecure storage of sensitive information.

Recommendations For versions prior to 1.0.13, update to version 1.0.13 to resolve the issue. For versions prior to 2.3.12, update to version 2.3.12 to resolve the issue. As a temporary workaround for users unable to upgrade, consider removing the passwordHash entry from src/bundle/Resources/config/graphql/User.types.yaml in the GraphQL package, and other properties like hash type, email, login if preferred.

Exploit

Fix

Information Disclosure

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-200

CWE-922

Related Identifiers

CVE-2022-41876

GHSA-C7PC-PGF6-MFH5

Affected Products

Ezplatform-Graphql

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41876.json · Exploit
• 🔥 https://github.com/Skileau/CVE-2022-41876 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41876 · Security Note
• https://osv.dev/vulnerability/GHSA-c7pc-pgf6-mfh5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41876 · Vendor Advisory
• https://github.com/ezsystems/ezplatform-graphql · Note
• https://github.com/ezsystems/ezplatform-graphql/security/advisories/GHSA-c7pc-pgf6-mfh5 · Note
• https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips · Note