Vulnerability · Published Feb 25, 2020 · Assigned by mitre

CVE-2020-8819

High 8.1

In plain English

A high-severity security flaw in the cardgate/woocommerce package (Packagist). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.9% (higher than 92% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.1High

Exploit odds (30 days)4.9%top 7.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	cardgate/woocommerce	3.1.16	GHSA-5pq5-9phv-q5j3

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/cardgate/woocommerce/blob/f2111af7b1a3fd701c1c5916137f3ac09482feeb/cardgate/cardgate.php#L426-L442 x_refsource_MISC
https://github.com/cardgate/woocommerce/issues/18 x_refsource_MISC
http://packetstormsecurity.com/files/156504/WordPress-WooCommerce-CardGate-Payment-Gateway-3.1.15-Bypass.html x_refsource_MISC
48134 exploit, x_refsource_EXPLOIT-DB
https://wpvulndb.com/vulnerabilities/10097 x_refsource_MISC