Pimcore admin-ui-classic-bundle up to 1.3.1 ZIP File selectedIds sql injection

Summaryinfo

A vulnerability marked as critical has been reported in Pimcore admin-ui-classic-bundle up to 1.3.1. Affected by this issue is some unknown functionality of the component ZIP File Handler. The manipulation of the argument selectedIds leads to sql injection. This vulnerability is documented as CVE-2024-23646. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Pimcore admin-ui-classic-bundle up to 1.3.1. This issue affects an unknown code of the component ZIP File Handler. The manipulation of the argument selectedIds with an unknown input leads to a sql injection vulnerability. Using CWE to declare the problem leads to CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The application allows users to create zip files from available files on the site. In the 1.x branch prior to version 1.3.2, parameter `selectedIds` is susceptible to SQL Injection. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. Version 1.3.2 contains a fix for this issue.

The weakness was released 01/24/2024. It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2024-23646 since 01/19/2024. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1505 according to MITRE ATT&CK.

Upgrading to version 1.3.2 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Information Management Software

Vendor

• Pimcore

Name

• admin-ui-classic-bundle

Version

• 1.3.0
• 1.3.1

License

• open-source

Website

• Product: https://github.com/pimcore/admin-ui-classic-bundle/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion