github - ghsa-p76j-h4m8-hx5c

ghsa-p76j-h4m8-hx5c

Vulnerability from github

Published

2023-09-27 15:30

Modified

2023-09-29 20:14

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Summary

Pimcore Demo Allows GraphQL Introspection

Details

Introspection is enabled on demo.pimcore.fun. The demo site has graphql as a feature for users, but allows users to run instropection queries, which presents a potential schema information disclosure vulnerability.

Show details on source website

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "pimcore/demo"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2023-5192"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1049",
      "CWE-200"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-09-27T20:24:29Z",
    "nvd_published_at": "2023-09-27T15:19:42Z",
    "severity": "MODERATE"
  },
  "details": "Introspection is enabled on `demo.pimcore.fun`. The demo site has graphql as a feature for users, but allows users to run instropection queries, which presents a potential schema information disclosure vulnerability.",
  "id": "GHSA-p76j-h4m8-hx5c",
  "modified": "2023-09-29T20:14:00Z",
  "published": "2023-09-27T15:30:40Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5192"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pimcore/demo/pull/437"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pimcore/demo/commit/a2a7ff3b565882aefb759804aac4a51afb458f1f"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/pimcore/demo"
    },
    {
      "type": "WEB",
      "url": "https://huntr.dev/bounties/65c954f2-79c3-4672-8846-a3035e7a1db7"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Pimcore Demo Allows GraphQL Introspection"
}

CVE-2023-5192 (GCVE-0-2023-5192)

Vulnerability from cvelistv5

Published

2023-09-26 07:34

Modified

2024-09-24 14:21

Severity ?

6.1 (Medium) - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-1049 - Excessive Data Query Operations in a Large Data Table

Summary

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.

References

►

URL

Tags

	https://huntr.dev/bounties/65c954f2-79c3-4672-8846-a3035e7a1db7
	https://github.com/pimcore/demo/commit/a2a7ff3b565882aefb759804aac4a51afb458f1f

Impacted products

	Vendor	Product	Version
	pimcore	pimcore/demo	Version: unspecified < 10.3.0

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.853Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/65c954f2-79c3-4672-8846-a3035e7a1db7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/pimcore/demo/commit/a2a7ff3b565882aefb759804aac4a51afb458f1f"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pimcore",
            "vendor": "pimcore",
            "versions": [
              {
                "lessThan": "10.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5192",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-24T14:12:54.546761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T14:21:53.364Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pimcore/demo",
          "vendor": "pimcore",
          "versions": [
            {
              "lessThan": "10.3.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1049",
              "description": "CWE-1049 Excessive Data Query Operations in a Large Data Table",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-26T07:34:27.103Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/65c954f2-79c3-4672-8846-a3035e7a1db7"
        },
        {
          "url": "https://github.com/pimcore/demo/commit/a2a7ff3b565882aefb759804aac4a51afb458f1f"
        }
      ],
      "source": {
        "advisory": "65c954f2-79c3-4672-8846-a3035e7a1db7",
        "discovery": "EXTERNAL"
      },
      "title": "Excessive Data Query Operations in a Large Data Table in pimcore/demo"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2023-5192",
    "datePublished": "2023-09-26T07:34:27.103Z",
    "dateReserved": "2023-09-26T07:34:14.104Z",
    "dateUpdated": "2024-09-24T14:21:53.364Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.