Lucene search

GitHub Advisory DatabaseGHSA-R3C9-9J5Q-PWV4

HistoryJan 26, 2023 - 7:51 p.m.

magento-lts Reset Password not protected against well-timed CSRF

2023-01-2619:51:48

CWE-352

GitHub Advisory Database

github.com

csrf

password reset

vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

34.8%

JSON

Impact

Password reset form is vulnerable to CSRF between time reset password link is clicked and user submits new password.

Patches

PR forthcoming

Workarounds

None

Affected configurations

Vulners

Node

openmagemagentoRange20.0.0–20.0.19lts

openmagemagentoRange<19.4.22lts

VendorProductVersionCPE
openmagemagento*cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*

Vendor	Product	Version	CPE
openmage	magento	*	cpe:2.3:a:openmage:magento:::::lts:::*

References

github.com/advisories/GHSA-r3c9-9j5q-pwv4

github.com/OpenMage/magento-lts/releases/tag/v19.4.22

github.com/OpenMage/magento-lts/releases/tag/v20.0.19

github.com/OpenMage/magento-lts/security/advisories/GHSA-r3c9-9j5q-pwv4

hackerone.com/reports/1086752

nvd.nist.gov/vuln/detail/CVE-2021-21395

packagist.org/packages/openmage/magento-lts

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

34.8%

JSON

Related for GHSA-R3C9-9J5Q-PWV4