PT-2023-14046 · Oro · Oroplatform

Dkhrysev · Published 2023-11-27 · Updated 2023-12-04 · CVE-2022-41951

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OroPlatform versions prior to 5.0.9

Description Path Traversal is possible in OroBundleGaufretteBundleFileManager::getTemporaryFileName. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. The file will be deleted immediately after the script ends.

Recommendations For versions prior to 5.0.9, apply the provided patch to OroBundleGaufretteBundleFileManager.php or decorate OroBundleGaufretteBundleFileManager::getTemporaryFileName in your customization and clear the $suggestedFileName argument to prevent Path Traversal. Alternatively, update to version 5.0.9 or later, where this vulnerability has been fixed.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-41951

GHSA-9V3J-4J64-P937

Affected Products

Oroplatform

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41951.json · Exploit
• https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41951 · Security Note
• https://osv.dev/vulnerability/GHSA-9v3j-4j64-p937 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41951 · Vendor Advisory
• https://github.com/oroinc/platform · Note
• https://t.me/cvenotify/62155 · Telegram Post
• https://t.me/cvenotify/61276 · Telegram Post