PT-2023-23968 · Unknown+1 · Saleor Core+1

Nyankiyoshi · Published 2023-05-25 · Updated 2023-06-01 · CVE-2023-32694

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Saleor Core versions prior to 3.7.68 Saleor Core versions prior to 3.8.40 Saleor Core versions prior to 3.9.49 Saleor Core versions prior to 3.10.36 Saleor Core versions prior to 3.11.35 Saleor Core versions prior to 3.12.25 Saleor Core versions prior to 3.13.16

Description The validate hmac signature function in Saleor Core is susceptible to timing attacks, which malicious users could exploit in deployments with the Adyen plugin enabled. This could allow them to determine the secret key and forge fake events, potentially affecting database integrity, such as incorrectly marking orders as paid.

Recommendations For versions prior to 3.7.68, update to version 3.7.68 or later. For versions prior to 3.8.40, update to version 3.8.40 or later. For versions prior to 3.9.49, update to version 3.9.49 or later. For versions prior to 3.10.36, update to version 3.10.36 or later. For versions prior to 3.11.35, update to version 3.11.35 or later. For versions prior to 3.12.25, update to version 3.12.25 or later. For versions prior to 3.13.16, update to version 3.13.16 or later.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

CWE-208

Related Identifiers

CVE-2023-32694

GHSA-3RQJ-9V87-2X3F

Affected Products

Adyen

Saleor Core

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32694.json · Exploit
• https://github.com/saleor/saleor/commit/1328274e1a3d04ab87d7daee90229ff47b3bc35e · Patch
• https://github.com/saleor/saleor/security/advisories/GHSA-3rqj-9v87-2x3f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32694 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32694 · Vendor Advisory