Vulnerability · Published Dec 7, 2021 · Assigned by GitHub_M
CVE-2021-43805ReDos vulnerability on guest checkout email validation
High 7.5
In plain English
A high-severity regular-expression denial of service in solidus from solidusio. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like `a.a.` Versions 3.1.4, 3.0.4, and 2.11.13 have been patched to use a different regular expression. The maintainers added a check for email addresses that are no longer valid that will print information about any affected orders that exist. If a prompt upgrade is not an option, a workaround is available. It is possible to edit the file `config/application.rb` manually (with code provided by the maintainers in the GitHub Security Advisory) to check email validity.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| RubyGems | solidus_core | 2.11.13 | GHSA-qxmr-qxh6-2cc9 |
| RubyGems | solidus_core | 3.0.4 | GHSA-qxmr-qxh6-2cc9 |
| RubyGems | solidus_core | 3.1.4 | GHSA-qxmr-qxh6-2cc9 |
Affected products (as reported)
Weakness: CWE-1333 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H