by Kastro
Paper/Archive/CVE-2022-24752

CVE-2022-24752

Sylius SyliusGridBundle — SQL Injection through sorting parameters in SyliusGridBundle

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.4.724 × 2014.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate the vulnerability. The issue is fixed in versions 1.10.1 and 1.11-rc2. As a workaround, overwrite the`Sylius\Component\Grid\Sorting\Sorter.php` class and register it in the container. More information about this workaround is available in the GitHub Security Advisory.

Affected

ProductAffectedFixed inSource
SyliusGridBundle< 1.10.1–CNA
SyliusGridBundle1.11-alpha, <= 1.11-rc–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/Sylius/SyliusGridBundle/security/advisories/GHSA-2xmm-g482-4439refgithub.com/Sylius/SyliusGridBundle/pull/222refgithub.com/Sylius/SyliusGridBundle/commit/73d0791d0575f955e830a3da4c3345f420d2f784refgithub.com/Sylius/SyliusGridBundle/releases/tag/v1.10.1refgithub.com/Sylius/SyliusGridBundle/releases/tag/v1.11.0-RC.2