CVE-2022-1631 (published 2022-05-09T14:15Z)

Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain pre-authentication to the victim’s account. Further, due to the lack of proper validation of email coming from Social Login and failing to check if an account already exists, the victim will not identify if an account is already existing. Hence, the attacker’s persistence will remain. An attacker would be able to see all the activities performed by the victim user impacting the confidentiality and attempt to modify/corrupt the data impacting the integrity and availability factor. This attack becomes more interesting when an attacker can register an account from an employee’s email address. Assuming the organization uses G-Suite, it is much more impactful to hijack into an employee’s account.

Severity: MEDIUM
CVSS v2 base score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v3 base score: 8.8, HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: CWE-863
cwe_name: Incorrect Authorization
description: The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
extended_description: 
            Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.
            When access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.
         
         

Fix information:
repo_url: https://github.com/microweber/microweber
commit_details: repo_url: https://github.com/microweber/microweber
author: Bozhidar Slaveykov
author_date: 2022-05-09 15:54:29+03:00
msg: Update index.blade.php
repository: repo_url: https://github.com/microweber/microweber
repo_name: microweber/microweber
description: Drag and Drop Website Builder and CMS with E-commerce
repo_language: HTML
owner: microweber
file_changes: filename: index.blade.php
change_type: ModificationType.MODIFY
diff: @@ -46,9 +46,11 @@
                         <div class="d-flex">
                             <p class="col-6 mb-0">
                                 @if($product->hasSpecialPrice())
-                                    <span class="price-old"><?php print currency_format($product->specialPrice); ?></span>
+                                    <span class="price-old"><?php print currency_format($product->price); ?></span>
+                                    <span class="money"><?php print currency_format($product->specialPrice); ?></span>
+                                @else
+                                    <span class="money"><?php print currency_format($product->price); ?></span>
                                 @endif
-                                <span class="money"><?php print currency_format($product->price); ?></span>
                             </p>
 
                             <a class="col-6 text-end text-right align-self-center" href="{{content_link($product->id)}}"> View</a>

programming_language: PHP