CVE-2024-27915: Sulu grants access to pages regardless of role permissions

Background

Sulu is an open-source content management platform that allows users to create and manage websites. It provides features such as multi-language support, content organization, and user management. However, a vulnerability has been discovered in Sulu that grants access to pages regardless of role permissions for webspaces with a security system configured and permission check enabled.

Vulnerability Detail

The vulnerability in Sulu allows unauthorized access to pages, bypassing role permissions. This means that users with lower privileges can gain access to restricted pages and perform actions that they should not be able to. This can lead to unauthorized data access, modification, or deletion. The issue is present in versions 2.2.0 to 2.4.16 and 2.5.0-alpha1 to 2.5.12 of the Sulu package.

Workaround

If upgrading is not immediately possible, users can apply a temporary workaround by removing specific lines from the 'vendor/symfony/security-http/HttpUtils.php' file. The lines to be removed are:

-            // Shortcut if request has already been matched before
-            if ($request->attributes->has('_route')) {
-                return $path === $request->attributes->get('_route');
 -           }

However, it is recommended to upgrade to the patched versions as soon as possible.

Conclusion

The vulnerability in Sulu allows unauthorized access to pages, bypassing role permissions. It is recommended to upgrade to Sulu version 2.4.17 or 2.5.13 to fix the issue. Alternatively, users can apply a temporary workaround by removing specific lines from the 'vendor/symfony/security-http/HttpUtils.php' file. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for sulu/sulu →

FAQ