WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation

2022-10-04 00:00
foobar7

Strategic Overview

Status
Patched in 2.1.66
Affected PluginProduct Vendors
Affected Version<= 2.1.65
CVSS4.3Medium
CVEN/A
View all Product Vendors vulnerabilities

Vulnerability Overview

The WooCommerce Products Vendor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.1.65. This is due to insufficient validation on the 'post_id' value supplied to the 'wc_product_vendors_vendor_add_order_note' AJAX action. This makes it possible for vendors to add notes to other vendors orders.

Technical Analysis

REMEDIATION: Update to version 2.1.66, or a newer patched version --- IDENTIFIER: CWE-639 (Authorization Bypass Through User-Controlled Key) The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C