GitHub Advisoryadvisory · Packagist

GHSA-45hc-r4fj-qj89 SQL injection in pagekit/pagekit

CRITICAL Published 2022-04-02 Modified 2022-04-18 Official page ↗
Aliases
CVE-2021-44135
Ecosystem
Packagist
Packages
pagekit/pagekit
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2022-04-05

Affected packages

• Packagist pagekit/pagekit: <= 1.0.18 (no fix yet)

Description

Pagekit is a modular and lightweight CMS built with Symfony components and Vue.js. The configAction in SettingsController allow user to set the order of comments listing. The allowed options are ASC and DESC. That config then get concatenated directly to the SQL query. Due to the fact that there wasnt any sanitizion before saving that config, it can lead to the SQL Injection vulnerability.

Related

Alias · CVE (1)

  • CVE-2021-44135 pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References