GitHub Advisoryadvisory · Packagist

GHSA-2jc6-3fhj-8q84 OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item

MEDIUM Published 2023-10-10 Modified 2023-10-13 Official page ↗
Aliases
CVE-2022-35950
Ecosystem
Packagist
Packages
oro/commerce
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-10-10

Affected packages

• Packagist oro/commerce: >= 4.1.0, <= 4.1.13 (no fix yet) • Packagist oro/commerce: >= 4.2.0, <= 4.2.10 (no fix yet) • Packagist oro/commerce: >= 5.0.0, < 5.0.11 → fixed in 5.0.11 • Packagist oro/commerce: >= 5.1.0, < 5.1.1 → fixed in 5.1.1

Description

Impact The JS payload added to the product name may be executed at the storefront when adding a note to the shopping list line item containing a vulnerable product. An attacker should be able to edit a product in the admin area and force a user to add this product to Shopping List and click add a note for it.

Related

Alias · CVE (1)

  • CVE-2022-35950 OroCommerce is an open-source Business to Business Commerce application. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References