CVE-2020-29156: WooCommerce Incorrect Authorization
Summary
CVE-2020-29156: WooCommerce Incorrect Authorization. Affects woocommerce/woocommerce versions < 4.7.0. Fixed in 4.7.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
WooCommerce is a popular plugin for WordPress that enables users to create and manage online stores. It provides various features for managing orders, products, and customer information. However, an incorrect authorization vulnerability has been identified in versions prior to 4.7.0. This vulnerability allows remote attackers to view the status of arbitrary orders by exploiting the order_id parameter in a fetch_order_status action.
Vulnerability Detail
The vulnerability arises from a lack of proper authorization checks in the affected versions of the WooCommerce plugin. By manipulating the order_id parameter, an attacker can bypass the intended access restrictions and retrieve the status of any order. This could lead to unauthorized access to sensitive order information, potentially compromising customer privacy and business operations.
How To Fix
Minimum fixed version
4.7.0
This is the first release that contains the fix.
composer require woocommerce/woocommerce:4.7.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The WooCommerce Incorrect Authorization vulnerability (CVE-2020-29156) allows remote attackers to view the status of arbitrary orders, potentially compromising customer privacy and business operations. To mitigate this risk, it is crucial to upgrade to WooCommerce version 4.7.0 or later. Website administrators should regularly check for security updates and promptly apply them to ensure the security of their online stores. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for woocommerce/woocommerce →
FAQ
The vulnerability allows attackers to view the status of arbitrary orders, potentially compromising customer privacy and business operations.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your composer.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the moment, there are no known workarounds for this vulnerability. It is recommended to upgrade to the latest version of WooCommerce to mitigate the risk.
There is currently no evidence of active exploits targeting this vulnerability. However, it is crucial to apply the necessary security updates to prevent potential exploitation.
For more information about this vulnerability, you can refer to the GitHub Advisory Database entry at: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-wwh8-v3j3-gxfw/GHSA-wwh8-v3j3-gxfw.json
Related vulnerabilities
Recent vulnerabilities recorded for woocommerce/woocommerce.
