CVE-2022-23065

In Vendure versions 0.1.0-alpha.2 to 1.5.1 are affected by Stored XSS vulnerability, where an attacker having catalog permission can upload a SVG file that contains malicious JavaScript into the “Assets” tab. The uploaded file will affect administrators as well as regular users.

CVSS v3 5.4 MEDIUM
CVSS v2.0 3.5 LOW

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/vendure-ecommerce/vendure/commit/69a44869112c0a5b836e2ddd3969ea9b533f51f0	Patch Third Party Advisory
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23065	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vendure:vendure::::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha10::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha11::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha12::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha13::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha14::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha15::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha16::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha18::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha2::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha3::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha4::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha5::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha6::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha7::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha8::::::
	cpe:2.3:a:vendure:vendure:0.1.0:alpha9::::::

History

No history.

Information

Published : 2022-05-02 13:15

Updated : 2022-05-10 16:34

NVD link : CVE-2022-23065

Mitre link : CVE-2022-23065

CVE.ORG link : CVE-2022-23065

JSON object : View

Products Affected

vendure

vendure

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-23065", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "vulnerabilitylab@mend.io", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-05-02T13:15:08.247", "references": [{"url": "https://github.com/vendure-ecommerce/vendure/commit/69a44869112c0a5b836e2ddd3969ea9b533f51f0", "tags": ["Patch", "Third Party Advisory"], "source": "vulnerabilitylab@mend.io"}, {"url": "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23065", "tags": ["Exploit", "Third Party Advisory"], "source": "vulnerabilitylab@mend.io"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "vulnerabilitylab@mend.io", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "In Vendure versions 0.1.0-alpha.2 to 1.5.1 are affected by Stored XSS vulnerability, where an attacker having catalog permission can upload a SVG file that contains malicious JavaScript into the \u201cAssets\u201d tab. The uploaded file will affect administrators as well as regular users."}, {"lang": "es", "value": "En Vendure versiones 0.1.0-alpha.2 a 1.5.1, est\u00e1n afectadas por una vulnerabilidad de tipo XSS almacenado, donde un atacante que tenga permiso de cat\u00e1logo puede subir un archivo SVG que contenga JavaScript malicioso en la pesta\u00f1a \"Assets\". El archivo subido afectar\u00e1 tanto a administradores como a usuarios normales"}], "lastModified": "2022-05-10T16:34:27.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vendure:vendure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "942E486B-0E5B-482B-B5AD-5C21EB1AC73B", "versionEndIncluding": "1.5.1", "versionStartIncluding": "0.1.2"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61A62862-F19E-48C9-BB25-123EE8C8D6E5"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "763F7985-F48A-407E-9C96-96FA1F38E534"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D22953B9-DCCE-4254-ACE7-BD9183A59449"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DD08957-E008-4D44-997F-A2EEC3E5B66D"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha14:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80D154FB-87F9-4C11-A662-1726FFA53755"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha15:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E166C100-CC9B-4741-A5EA-74DD35E1B0FD"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha16:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BD1F5C5-F9B9-4246-90FF-05F2C909B41C"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha18:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA2053B5-64D2-46D3-9D92-F3C7F7C313FD"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "457A3442-17DC-456B-A1A8-40884B670F95"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AAF4576-29AA-4C10-9B03-CDE5AA4DE6F5"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "851C8FD6-F4C2-4221-8AB8-A650F25CA593"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3BC9BCD-FE96-4E3B-B042-640B89A7C0E0"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C6E25E2-3C99-44EF-8AA7-30531E184601"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ADC4F1C-DF60-4F16-97E2-3EA3D18E9ECD"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B41FDFE7-6B15-42A6-9617-5321D7C441CC"}, {"criteria": "cpe:2.3:a:vendure:vendure:0.1.0:alpha9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9007357-5B4E-4707-AC46-EEC90948B747"}], "operator": "OR"}]}], "sourceIdentifier": "vulnerabilitylab@mend.io"}