Patchfirst
Patchfirst
CVE-2020-15132 Medium · 5.3 EPSS 1.1%

Reset Password / Login vulnerability in Sulu

sulu · sulu

Official description · CVE.org

In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu asks the user for a username or email address. If the given string is not found, a response with a `400` error code is returned, along with a error message saying that this user name does not exist. This enables attackers to retrieve valid usernames. Also, the response of the "Forgot Password" request returns the email address to which the email was sent, if the operation was successful. This information should not be exposed, as it can be used to gather email addresses. This problem was fixed in versions 1.6.35, 2.0.10 and 2.1.1.

Breakdown
16.9 / 100
Exploited
Not confirmed
Reports
0
Tactics
1/15

How an attack unfolds

Based on mappings. Select a step to see the evidence.

  1. What they do

Disclosed on 5 Aug 2020. No public exploit code or confirmed exploitation is recorded.

6 fixes in sulu/sulu over 3 years. The latest fix listed for sulu/sulu is 2.5.10.

Fixes in sulu/suluPackagist package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

  1. 1.6.41CVE-2021-327372 Jul 2021
  2. 1.6.43CVE-2021-4116921 Oct 2021
  3. 2.1.1CVE-2020-151325 Aug 2020
  4. 2.4.0CVE-2021-4383515 Dec 2021
  5. 2.4.0CVE-2021-4383615 Dec 2021
  6. 2.5.10CVE-2023-393434 Aug 2023Latest listed

techniques

1 , grouped by in kill-chain order 1

ReconnaissanceTA0043

Gather Victim Identity Information T1589
MITRE CTID mapping of the CVE · primary impact

Detection

0 rules for this CVE · 2 general rules for its techniques

Rules for this CVE

0 that reference CVE-2020-15132 directly.

CVE-specific rules are not available in this build. Search SigmaHQ ↗

General rules for this CVE’s techniques

These detect the technique in general, not this specific vulnerability.

Gather Victim Identity InformationT15892 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

1 package in 1 ecosystem. Main package: sulu/sulu.

Packagistsulu/suluGHSA-wfm4-pq59-wg6r

Upgrade to 2.1.1 or later

Set the version to 2.1.1 or later in your composer.json.

The first fix for CVE-2020-15132. No other CVE tracked by Patchfirst affects this package.

Affected versions, by release line

If you runUpgrade to
2.1.0 up to 2.1.12.1.1
2.0.0 up to 2.0.102.0.10
All versions before 1.6.341.6.34

“Up to” means the second version is the fix and is not affected.

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

References

1 link, grouped by NVD tag

x_refsource_CONFIRM 1

github.com/sulu/sulu/security/advisories/GHSA-wfm4-pq59-wg6r
↑ ↓ chooseEnter openEsc close