CVE-2023-32694
Last modified
CVE-2023-32694 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. Saleor Core is a composable, headless commerce API. Saleor's `validate_hmac_signature` function is vulnerable to timing attacks. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
Saleor Core is a composable, headless commerce API. Saleor's `validate_hmac_signature` function is vulnerable to timing attacks. Malicious users could abuse this vulnerability on Saleor deployments having the Adyen plugin enabled in order to determine the secret key and forge fake events, this could affect the database integrity such as marking an order as paid when it is not. This issue has been patched in versions 3.7.68, 3.8.40, 3.9.49, 3.10.36, 3.11.35, 3.12.25, and 3.13.16.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Saleor | Saleor | >= 2.11.0, < 3.7.68 |
| Saleor | Saleor | >= 3.8.0, < 3.8.40 |
| Saleor | Saleor | >= 3.9.0, < 3.9.49 |
| Saleor | Saleor | >= 3.10.0, < 3.10.36 |
| Saleor | Saleor | >= 3.11.0, < 3.11.35 |
| Saleor | Saleor | >= 3.12.0, < 3.12.25 |
| Saleor | Saleor | >= 3.13.0, < 3.13.16 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32694?
How severe is CVE-2023-32694?
How do I fix CVE-2023-32694?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32689Parse Server is an open source backend that can be deployed …6.5
- CVE-2023-3269A vulnerability exists in the memory management subsystem of…7.8
- CVE-2023-32690libspdm is a sample implementation that follows the DMTF SPD…7.5
- CVE-2023-32691gost (GO Simple Tunnel) is a simple tunnel written in golang…5.9
- CVE-2023-32692CodeIgniter is a PHP full-stack web framework. This vulnerab…9.8
- CVE-2023-32693Decidim is a participatory democracy framework, written in R…6.1
- CVE-2023-32695socket.io parser is a socket.io encoder and decoder written …7.5
- CVE-2023-32696CKAN is an open-source data management system for powering d…8.8
- CVE-2023-32697SQLite JDBC is a library for accessing and creating SQLite d…9.8
- CVE-2023-32698nFPM is an alternative to fpm. The file permissions on the c…7.1
- CVE-2023-32699MeterSphere is an open source continuous testing platform. V…6.5
- CVE-2023-3270Exposure of Sensitive Information to an Unauthorized Actor i…7.5
Are you affected by CVE-2023-32694?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST