Vulnerabilities > CVE-2021-43822 - Unspecified vulnerability in Jackalope Doctrine-Dbal Project Jackalope Doctrine-Dbal

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

jackalope-doctrine-dbal-project

NVD

Published: 2021-12-13

Updated: 2024-11-21

Summary

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API (PHPCR) using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible, you can escape all places where `$property` is used to filter `sv:name` in the class `Jackalope\Transport\DoctrineDBAL\Query\QOMWalker`: `XPath::escape($property)`. Node names and xpaths can contain `"` or `;` according to the JCR specification. The jackalope component that translates the query object model into doctrine dbal queries does not properly escape the names and paths, so that a accordingly crafted node name can lead to an SQL injection. If queries are never done from user input, or if you validate the user input to not contain `;`, you are not affected.

Vulnerable Configurations

Part	Description	Count
Application	Jackalope_Doctrine-Dbal_Project Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.0.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.2 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.3 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.4 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.1.5 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.2 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.3 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.4 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.5 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.6 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.7 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.2.8 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.2 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.3 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.4 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.5 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.3.6 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.4.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.4.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.5.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.5.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.6.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.6.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.7.0 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.7.1 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.7.2 Jackalope Doctrine Dbal Project Jackalope Doctrine Dbal 1.7.3	44

Summary

Vulnerable Configurations

References