CVE-2024-22406: Blind SQL injection in shopware
Summary
CVE-2024-22406: Blind SQL injection in shopware. Affects shopware/core versions < 6.5.7.4. Fixed in 6.5.7.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Shopware is an application API that allows users to search through information stored within their Shopware instance. It provides a search functionality that can be aggregated using parameters in the 'aggregations' object. However, this search functionality is vulnerable to blind SQL injection through the 'name' field in the 'aggregations' object. This vulnerability can be exploited using time-based SQL queries.
Vulnerability Detail
The blind SQL injection vulnerability in Shopware's search functionality allows an attacker to manipulate the 'name' field in the 'aggregations' object to inject malicious SQL code. By exploiting this vulnerability, an attacker can execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or even remote code execution. The vulnerability has a CVSS score of 9.3, indicating a critical severity level.
How To Fix
Minimum fixed version
6.5.7.4
This is the first release that contains the fix.
composer require shopware/core:6.5.7.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
For older versions of Shopware (6.1, 6.2, 6.3, and 6.4), a corresponding security plugin is available to mitigate the risk. However, it is strongly advised to update to the latest version for full security and functionality.
Conclusion
The blind SQL injection vulnerability in Shopware's search functionality poses a critical security risk. It is crucial to update to the latest version (6.5.7.4 or later) or apply the corresponding security plugin for older versions to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for shopware/core →
FAQ
The vulnerability allows an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or remote code execution.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your composer.lock file to the playground, and it will alert you in real-time if your application is vulnerable.
Yes, for older versions (6.1, 6.2, 6.3, and 6.4), a corresponding security plugin is available to mitigate the risk. However, updating to the latest version is strongly recommended.
The CVSS score of this vulnerability is 9.3, indicating a critical severity level.
You can find more information about this vulnerability, including the technical details and patches, in the GitHub Advisory Database at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-qmp9-2xwj-m6m9/GHSA-qmp9-2xwj-m6m9.json
References
Related vulnerabilities
Recent vulnerabilities recorded for shopware/core.
