// For flags

CVE-2022-29254

Failed payment recorded has completed in silverstripe/silverstripe-omnipay

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is possible for payments to be prematurely marked as completed without payment being taken. This is mitigated by the fact that most payment gateways hide this information from users, however some issuing banks offer flawed 3DSecure implementations that may inadvertently expose this data. The following versions have been patched to fix this issue: `2.5.2`, `3.0.2`, `3.1.4`, and `3.2.1`. There are no known workarounds for this vulnerability.

silverstripe-omnipay es una integración de SilverStripe con la biblioteca de pagos Omnipay PHP. Para un subconjunto de pasarelas Omnipay (aquellas que usan estados intermedios como "isNotification()" o "isRedirect()"), si el identificador de pago o la URL de éxito están expuestos es posible que los pagos sean marcados prematuramente como completados sin que el pago haya sido realizado. Esto es mitigado por el hecho de que la mayoría de las pasarelas de pago ocultan esta información a usuarios, sin embargo, algunos bancos emisores ofrecen implementaciones defectuosas de 3DSecure que pueden exponer inadvertidamente estos datos. Las siguientes versiones han sido parcheadas para corregir este problema: "2.5.2", "3.0.2", "3.1.4" y "3.2.1". No son conocidas mitigaciones para esta vulnerabilidad

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-04-13 CVE Reserved
  • 2022-06-06 CVE Published
  • 2023-12-28 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-436: Interpretation Conflict
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Silverstripe
Search vendor "Silverstripe"
 Silverstripe-omnipay
Search vendor "Silverstripe" for product "Silverstripe-omnipay"
 < 2.5.2
Search vendor "Silverstripe" for product "Silverstripe-omnipay" and version " < 2.5.2"
-
Affected
Silverstripe
Search vendor "Silverstripe"
 Silverstripe-omnipay
Search vendor "Silverstripe" for product "Silverstripe-omnipay"
 >= 3.0.0 < 3.0.2
Search vendor "Silverstripe" for product "Silverstripe-omnipay" and version " >= 3.0.0 < 3.0.2"
-
Affected
Silverstripe
Search vendor "Silverstripe"
 Silverstripe-omnipay
Search vendor "Silverstripe" for product "Silverstripe-omnipay"
 >= 3.1.0 < 3.1.4
Search vendor "Silverstripe" for product "Silverstripe-omnipay" and version " >= 3.1.0 < 3.1.4"
-
Affected
Silverstripe
Search vendor "Silverstripe"
 Silverstripe-omnipay
Search vendor "Silverstripe" for product "Silverstripe-omnipay"
 >= 3.2.0 < 3.2.1
Search vendor "Silverstripe" for product "Silverstripe-omnipay" and version " >= 3.2.0 < 3.2.1"
-
Affected