Log in Start free

Vulnerability · Published Mar 15, 2022 · Assigned by GitHub_M

CVE-2022-24752SQL Injection through sorting parameters in SyliusGridBundle

Critical 9.8

In plain English

A critical-severity SQL injection in SyliusGridBundle from Sylius. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.4%top 27.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate the vulnerability. The issue is fixed in versions 1.10.1 and 1.11-rc2. As a workaround, overwrite the`Sylius\Component\Grid\Sorting\Sorter.php` class and register it in the container. More information about this workaround is available in the GitHub Security Advisory.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Packagistsylius/grid-bundle1.10.1GHSA-2xmm-g482-4439

Affected products (as reported)

VendorProductVersions
Sylius SyliusGridBundle < 1.10.11.11-alpha, <= 1.11-rc

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References