CVE-2022-41951: Path Traversal Vulnerability in OroPlatform
Summary
CVE-2022-41951: OroPlatform vulnerable to path traversal during temporary file manipulations. Affects oro/platform across 3 version ranges.
>= 4.1.0, <= 4.1.13
>= 4.2.0, <= 4.2.10
>= 5.0.0, < 5.0.8
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OroPlatform is an open-source business application platform built on top of Symfony. It provides a wide range of features and functionalities for developing and managing business applications. The platform includes the OroCommerce and OroCRM applications, which are widely used in the e-commerce and customer relationship management domains. However, OroPlatform is vulnerable to a path traversal vulnerability that can be exploited during temporary file manipulations.
Vulnerability Detail
The vulnerability, identified as CVE-2022-41951, allows an attacker to perform path traversal attacks through the Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName method. By passing the path to a non-existent file, the attacker can write content to a new file that will be available during script execution. The file is automatically deleted after the script ends. This vulnerability can lead to unauthorized access, data leakage, and potential remote code execution.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If applying the patch or decorating services is not feasible, you can implement the following workaround:
public function getTemporaryFileName(string $suggestedFileName = null): string
{
if ($suggestedFileName) {
$suggestedFileName = basename($suggestedFileName);
}
return parent::getTemporaryFileName($suggestedFileName);
}
Conclusion
The path traversal vulnerability in OroPlatform can have severe consequences, including unauthorized access, data leakage, and potential remote code execution. It is crucial to apply the provided patch or implement the workaround to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for oro/platform →
FAQ
The vulnerability allows an attacker to perform path traversal attacks, potentially leading to unauthorized access, data leakage, and remote code execution.
The vulnerability affects OroPlatform versions 4.1.0 to 4.1.13, 4.2.0 to 4.2.10, and 5.0.0 to 5.0.8.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. It analyzes your composer.lock file and provides real-time alerts for open-source vulnerabilities.
At the time of this report, there are no known public exploits for this vulnerability. However, it is important to apply the patch or implement the workaround to mitigate the risk.
You can refer to the OWASP Path Traversal page (https://owasp.org/www-community/attacks/Path_Traversal) for more information about path traversal attacks and how to prevent them.
References
Related vulnerabilities
Recent vulnerabilities recorded for oro/platform.
