Log in Start free

Vulnerability · Published Nov 27, 2023 · Assigned by GitHub_M

CVE-2022-41951OroPlatform vulnerable to path traversal during temporary file manipulations

High 8.6

In plain English

A high-severity path traversal in platform from oroinc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.9%top 38.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. This vulnerability has been fixed in version 5.0.9.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Packagistoro/platformno fix listedGHSA-9v3j-4j64-p937
Packagistoro/platformno fix listedGHSA-9v3j-4j64-p937
Packagistoro/platform5.0.8GHSA-9v3j-4j64-p937

Affected products (as reported)

VendorProductVersions
oroinc platform >= 4.1.0, <= 4.1.13>= 4.2.0, <= 4.2.10 >= 5.0.0, < 5.0.9

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References