Ez Platform Object Injection in legacy shop module
The advisory, in context
This Security Advisory is about a vulnerability in the Legacy shop module. A backend editor could perform object injection in discount rules. This would require backend access and permission to edit discount rules. While object injection in itself is a serious vulnerability, the permission requirement means that normally only administrators would be able to exploit it, that's why it was classified as Medium severity.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
From 2019.3.0 before 2019.3.5.1
Fixed in 2019.3.5.1
7 explicitly affected versions
v2019.03.0, v2019.03.1, v2019.03.2, v2019.03.3, v2019.03.4, v2019.03.4.2, v2019.03.5
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "2019.3.0"
},
{
"fixed": "2019.3.5.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2019.03.0",
"v2019.03.1",
"v2019.03.2",
"v2019.03.3",
"v2019.03.4",
"v2019.03.4.2",
"v2019.03.5"
]
}From 2017.12.0 before 2017.12.7.3
Fixed in 2017.12.7.3
17 explicitly affected versions
v2017.12.0, v2017.12.1, v2017.12.1.1, v2017.12.2, v2017.12.2.1, v2017.12.2.2, v2017.12.3, v2017.12.3.1, v2017.12.3.2, v2017.12.4, v2017.12.4.1, v2017.12.4.2, v2017.12.4.3, v2017.12.5, v2017.12.6, v2017.12.7, v2017.12.7.2
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "2017.12.0"
},
{
"fixed": "2017.12.7.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2017.12.0",
"v2017.12.1",
"v2017.12.1.1",
"v2017.12.2",
"v2017.12.2.1",
"v2017.12.2.2",
"v2017.12.3",
"v2017.12.3.1",
"v2017.12.3.2",
"v2017.12.4",
"v2017.12.4.1",
"v2017.12.4.2",
"v2017.12.4.3",
"v2017.12.5",
"v2017.12.6",
"v2017.12.7",
"v2017.12.7.2"
]
}From 5.4.0 before 5.4.14.2
Fixed in 5.4.14.2
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "5.4.0"
},
{
"fixed": "5.4.14.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": []
}