CVE-2022-29933 : Security Advisory and Response

Craft CMS through 3.7.36 allows a remote unauthenticated attacker to reset an account's password and take over the account by manipulating HTTP headers during the password reset process.

Understanding CVE-2022-29933

Craft CMS versions up to 3.7.36 are vulnerable to a password reset poisoning attack that enables an attacker to compromise user accounts.

What is CVE-2022-29933?

Craft CMS 3.7.36 and below are susceptible to a security flaw that allows an attacker, with knowledge of a valid username, to reset the account password and gain unauthorized access.

The Impact of CVE-2022-29933

This vulnerability could lead to unauthorized account takeovers and potential data breaches if exploited by malicious actors.

Technical Details of CVE-2022-29933

Craft CMS through 3.7.36 is affected by a remote unauthenticated password reset poisoning attack leveraging HTTP headers.

Vulnerability Description

The vulnerability in Craft CMS enables an attacker to reset account passwords by manipulating crafted HTTP headers, specifically through the X-Forwarded-Host header.

Affected Systems and Versions

Craft CMS versions up to 3.7.36 are impacted by this security issue.

Exploitation Mechanism

To exploit this vulnerability, an attacker needs to send X-Forwarded-Host to the /index.php?p=admin/actions/users/send-password-reset-email URI.

Mitigation and Prevention

Craft CMS users should take immediate steps to secure their installations and prevent potential exploitation of this vulnerability.

Immediate Steps to Take

Users should consider adjusting configurations to mitigate the risk posed by this vulnerability, particularly by avoiding default settings.

Long-Term Security Practices

Implementing strong password policies, regular security audits, and staying updated with security patches can help bolster system security.

Patching and Updates

Craft CMS users are advised to update to the latest version or apply relevant patches provided by the vendor to address this vulnerability.