CVE-2019-25754: Joomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout
Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keysearch parameter. Attackers can send POST requests to the menu-listing-layout endpoint with crafted SQL payloads in the keysearch parameter to extract database table names and sensitive information from the database.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
joomla-component/vRestaurant 1.9.4from your environment.If vRestaurant 1.9.4 is not required, uninstall or disable the vRestaurant 1.9.4 Joomla component to eliminate the vulnerable functionality (menu-listing-layout endpoint).
- Configuration
Require authentication/authorization for access to the menu-listing-layout endpoint (prevent unauthenticated POST requests to this endpoint).
Joomla vRestaurant menu-listing-layout endpoint authentication_required = true - Compensating control
Deploy a WAF or firewall rule to block or inspect POST requests to the menu-listing-layout endpoint and to block SQL injection patterns in the keysearch parameter (or block requests containing suspicious SQL payloads). Restrict access to the endpoint to trusted IPs where possible.
- Operational
Audit logs for POST requests to the menu-listing-layout endpoint and signs of exploitation (SQL payloads in the keysearch parameter). If sensitive data may have been extracted, assume compromise and rotate affected database credentials and secrets, and perform forensic review.
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25754?
CVE-2019-25754 has a severity score of 8.8, which is classified as high.
What type of vulnerability is CVE-2019-25754?
CVE-2019-25754 is an SQL injection vulnerability in Joomla Component vRestaurant 1.9.4.
How does CVE-2019-25754 affect Joomla users?
CVE-2019-25754 allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code.
How do I fix CVE-2019-25754?
To fix CVE-2019-25754, update to a version of Joomla vRestaurant that is not affected by this SQL injection vulnerability.
What is the impact of CVE-2019-25754?
The impact of CVE-2019-25754 includes potential data exposure and unauthorized access to the database.