CVE-2022-34253

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does not require user interaction.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://helpx.adobe.com/security/products/magento/apsb22-38.html	Vendor Advisory
https://helpx.adobe.com/security/products/magento/apsb22-38.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:commerce::::::::
	cpe:2.3:a:adobe:commerce::::::::
	cpe:2.3:a:adobe:commerce:2.3.7:-::::::
	cpe:2.3:a:adobe:commerce:2.3.7:p1::::::
	cpe:2.3:a:adobe:commerce:2.3.7:p2::::::
	cpe:2.3:a:adobe:commerce:2.3.7:p3::::::
	cpe:2.3:a:adobe:commerce:2.4.3:-::::::
	cpe:2.3:a:adobe:commerce:2.4.3:p1::::::
	cpe:2.3:a:adobe:commerce:2.4.3:p2::::::
	cpe:2.3:a:adobe:commerce:2.4.4:-::::::
	cpe:2.3:a:magento:magento:::::commerce:::*
	cpe:2.3:a:magento:magento:::::commerce:::*
	cpe:2.3:a:magento:magento:2.3.7:-:::commerce:::*
	cpe:2.3:a:magento:magento:2.3.7:p1:::commerce:::*
	cpe:2.3:a:magento:magento:2.3.7:p2:::commerce:::*
	cpe:2.3:a:magento:magento:2.3.7:p3:::commerce:::*
	cpe:2.3:a:magento:magento:2.4.3:-:::commerce:::*
	cpe:2.3:a:magento:magento:2.4.3:p1:::commerce:::*
	cpe:2.3:a:magento:magento:2.4.3:p2:::commerce:::*
	cpe:2.3:a:magento:magento:2.4.4:-:::commerce:::*

History

21 Nov 2024, 07:09

Type	Values Removed	Values Added
References	~~() https://helpx.adobe.com/security/products/magento/apsb22-38.html - Vendor Advisory~~	() https://helpx.adobe.com/security/products/magento/apsb22-38.html - Vendor Advisory

Information

Published : 2022-08-16 21:15

Updated : 2024-11-21 07:09

NVD link : CVE-2022-34253

Mitre link : CVE-2022-34253

CVE.ORG link : CVE-2022-34253

JSON object : View

Products Affected

adobe

commerce

magento

magento

CWE

CWE-91

XML Injection (aka Blind XPath Injection)

{"id": "CVE-2022-34253", "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "psirt@adobe.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2022-08-16T21:15:09.973", "references": [{"url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", "tags": ["Vendor Advisory"], "source": "psirt@adobe.com"}, {"url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@adobe.com", "description": [{"lang": "en", "value": "CWE-91"}]}], "descriptions": [{"lang": "en", "value": "Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "Adobe Commerce versiones 2.4.3-p2 (y anteriores), 2.3.7-p3 (y anteriores) y 2.4.4 (y anteriores) est\u00e1n afectadas por una vulnerabilidad de inyecci\u00f3n XML en el m\u00f3dulo de widgets. Un atacante con privilegios de administrador puede desencadenar un script especialmente dise\u00f1ado para lograr una ejecuci\u00f3n de c\u00f3digo remota. No es requerida una interacci\u00f3n del usuario para la explotaci\u00f3n de este problema."}], "lastModified": "2024-11-21T07:09:09.320", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "710EE526-2F86-4887-9D94-17A3F20E3396", "versionEndExcluding": "2.3.7", "versionStartIncluding": "2.3.0"}, {"criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF96C367-576B-437B-A86C-CB9CA65CB481", "versionEndExcluding": "2.4.3", "versionStartIncluding": "2.4.0"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4346BF61-743B-4BBE-AC90-9954FEE6E943"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F471E19-8AFE-4A6C-88EA-DF94428518F7"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27E5B990-1E1C-46AC-815F-AF737D211C16"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D1598F4-AA41-4F94-A986-E603DC42AC8B"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B503C35-8C90-4A24-8E60-722CDBBF556B"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A453C85-A14A-47B8-B91D-3906BBE42A78"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38FFC3BA-B75E-4060-9E29-74367C7BE8A8"}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"}, {"criteria": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "EF7E0CE5-C73F-4516-9C22-D661C1D09BED", "versionEndExcluding": "2.3.7", "versionStartIncluding": "2.3.0"}, {"criteria": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "D26A9A5C-27A5-481C-A721-ED774F90A503", "versionEndExcluding": "2.4.3", "versionStartIncluding": "2.4.0"}, {"criteria": "cpe:2.3:a:magento:magento:2.3.7:-:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "F124A6F4-E3B3-4065-970D-963BAAAD59CB"}, {"criteria": "cpe:2.3:a:magento:magento:2.3.7:p1:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "0F954F97-00FF-4ADC-A185-ACF0513C5294"}, {"criteria": "cpe:2.3:a:magento:magento:2.3.7:p2:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "E4798194-5488-4DB5-8427-0AFDDD8F4D0E"}, {"criteria": "cpe:2.3:a:magento:magento:2.3.7:p3:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "8D8E981A-FE0D-47EA-A138-C8DB67DF3859"}, {"criteria": "cpe:2.3:a:magento:magento:2.4.3:-:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "A573FBD1-29A3-4601-B0FA-AFEF953C05E5"}, {"criteria": "cpe:2.3:a:magento:magento:2.4.3:p1:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "9D138592-62B8-458A-9B95-9E05FDA8D63A"}, {"criteria": "cpe:2.3:a:magento:magento:2.4.3:p2:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "415E26EA-1394-4415-8CF0-8E61BC12AB24"}, {"criteria": "cpe:2.3:a:magento:magento:2.4.4:-:*:*:commerce:*:*:*", "vulnerable": true, "matchCriteriaId": "3A428482-CEE7-4B7A-9CDE-C062E7126110"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@adobe.com"}