CVE Vulnerability

CVE-2021-43805

Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like `a.a.` Versions 3.1.4, 3.0.4, and 2.11.13 have been patched to use a different regular expression. The maintainers added a check for email addresses that are no longer valid that will print information about any affected orders that exist. If a prompt upgrade is not an option, a workaround is available. It is possible to edit the file `config/application.rb` manually (with code provided by the maintainers in the GitHub Security Advisory) to check email validity.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/solidusio/solidus/security/advisories/GHSA-qxmr-qxh6-2cc9 Exploit Mitigation
https://github.com/solidusio/solidus/commit/9867153e01e3c3b898cdbcedd7b43375ea922401 Patch Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:nebulab:solidus:*:*:*:*:*:*:*:*
cpe:2.3:a:nebulab:solidus:*:*:*:*:*:*:*:*
cpe:2.3:a:nebulab:solidus:*:*:*:*:*:*:*:*
Information

Published : 2021-12-07 06:15

Updated : 2021-12-08 05:30

NVD link : CVE-2021-43805

Mitre link : CVE-2021-43805

Products Affected
No products.
CWE
CWE-1333

Inefficient Regular Expression Complexity