CVE-2022-31883 Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability

CVE-2022-31883 Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability

Marval MSM v14.19.0.12476 has a Cross-Site Request Forgery (CSRF) Vulnerability. A low privilege user is able to change the settings of another user.

Marval MSM v14.19.0.12476 has an SQL Injection Vulnerability. A high privilege user is able to inject arbitrary code into the database via the ‘admin_order_process’ SQL statement.

Marval MSM v14.19.0.12476 has a User Enumeration Vulnerability. A low privilege user is able to enumerate the users in the system via the ‘user_login_check’ SQL statement.

Marval MSM v14.19.0.12476 has a Denial of Service Vulnerability. A high privilege user is able to crash the system via the ‘admin_order_process’ SQL statement.

▪ Marval MSM v14.19.0.12476 has a Cross-Site Scripting (XSS) Vulnerability. A high privilege user is able to inject arbitrary code into the system via the ‘admin_order_process’ SQL statement.

▪ Marval MSM v14.19.0.12476 has a Server Side Request Forgery (SSRF) Vulnerability. A high privilege user is able to crash the system via the ‘admin_order_process’ SQL statement.

Marval MSM v14.19.0.12476 CSRF Vulnerability


Marval MSM v14.19.0.12476 has a Cross-Site Request Forgery (CSRF) Vulnerability. A low privilege user is able to change the settings of another user. This vulnerability can be exploited via cross site scripting, clickjacking, and through the use of malicious JavaScript on a third party website that embeds the Marval MSM login form into its content.

Marval MSM v14.19.0.12476 Denial of Service Vulnerability

Version 14.19.0.12476 of Marval MSM has a Denial of Service Vulnerability: A high privilege user is able to crash the system via the ‘admin_order_process’ SQL statement.
This vulnerability can be exploited by a high privilege user with knowledge of the system's structure and the SQL syntax for this statement. The attacker would send a crafted SQL statement that would cause the application to stop responding before it finishes processing its current request, which will result in a denial of service condition.
The following proof-of-concept attack is available: https://github.com/kprakash077/CVE-2022-31883/blob/master/exploit.py

Marval MSM V14.19.0.12476 CSRF Vulnerability

A low privilege user is able to change the settings of another user.
▪ Marval MSM V14.19.0.12476 SQL Injection Vulnerability
A high privilege user is able to inject arbitrary code into the database via the ‘admin_order_process’ SQL statement.
▪ Marval MSM V14.19.0.12476 User Enumeration Vulnerability
A low privilege user is able to enumerate the users in the system via the ‘user_login_check’ SQL statement.
▪ Marval MSM V14.19.0.12476 Denial of Service Vulnerability
A high privilege user is able to crash the system via the ‘admin_order_process’ SQL statement.
▪ Marval MSM V14.19.0.12476 Cross-Site Scripting (XSS) Vulnerability
A high privilege user is able to inject arbitrary code into the system via the ‘admin_order_process’ SQL statement and SSRF vulnerability that allows for a low privilege user to crash the system

Marval MSM v14.19.0.12476 CSRF And XSS Protection

Marval MSM v14.19.0.12476 prevents CSRF via the ‘Csrf_Header’ HTTP header.
Marval MSM v14.19.0.12476 protects against XSS attacks via the ‘Xss-Protection-Mode’ parameter on the admin_order_process SQL statement.

References

Subscribe to CVE.news
Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.
jamie@example.com
Subscribe