GHSA-5pq5-9phv-q5j3

    Dashboard / Vulnerabilities / GHSA-5pq5-9phv-q5j3

    GHSA-5pq5-9phv-q5j3

    Published: 24 May 2022Last Modified: 8 Nov 2023
    Aliases:
    CVE-2020-8819

    Summary: CardGate Payments plugin for WooCommerce does not validate request origin

    Details: An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments.

    References: https://nvd.nist.gov/vuln/detail/CVE-2020-8819, https://github.com/cardgate/woocommerce/issues/18, https://github.com/cardgate/woocommerce/pull/17/commits/0b83588d604c8c56c7fded43144fcced96b2ada9, https://github.com/cardgate/woocommerce, https://github.com/cardgate/woocommerce/blob/f2111af7b1a3fd701c1c5916137f3ac09482feeb/cardgate/cardgate.php#L426-L442, https://wpvulndb.com/vulnerabilities/10097, https://www.exploit-db.com/exploits/48134, http://packetstormsecurity.com/files/156504/WordPress-WooCommerce-CardGate-Payment-Gateway-3.1.15-Bypass.html

    Affected packages

    Package

    Name: cardgate/woocommerce

    Purl: pkg:composer/cardgate/woocommerce

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.1.16

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-5pq5-9phv-q5j3 | CVE-DB