Unauthenticated Order Data Exposure in GTM Server-Side Plugin via Cookie Manipulation

Vulnerability Summary: Customer Order Data Exposed via Unauthenticated GTM Server-Side Plugin Overview Vulnerability Name: Customer Order Data Exposed via Unauthenticated Cookie Manipulation in GTM Server-Side Plugin Vulnerability Type: Unauthorized Access / Information Disclosure CVSS Score: 6.5 (Medium) Description: In the GTM Server-Side WordPress plugin, insufficient validation of the cookie allows attackers to forge the cookie value and access arbitrary user order data without logging in. This vulnerability enables unauthorized users to obtain sensitive order information (such as names, addresses, and items) for other customers by manipulating the cookie. Scope of Impact Affected Versions: - All versions ≤ 3.1.4 - Specifically includes all versions from 1.0.0 to 3.1.4 Affected Plugin: - GTM Server-Side WordPress Plugin (provided by "GTM Server-Side Hosting") Impacted Functionality: - Order data exposure (via cookie manipulation) - Unauthorized access to customer order details Remediation Fixed Version: 3.1.5+ Fix Details: - Implemented strict validation mechanisms for the cookie - Ensured that only authenticated users can access their own order data - Prevented unauthorized users from obtaining other users' order information by forging cookies Recommended Actions: - Immediately upgrade the plugin to version 3.1.5 or higher - Investigate potential historical order data breaches - Monitor access logs for anomalies POC / Exploit Code > Note: Attackers only need to set the cookie to any valid order ID to access that order's data without being logged in. Additional Key Information Discoverer: Not disclosed (not mentioned on the page) Disclosure Date: 2024-08-14 Reference Links: - Official Fix Announcement - Vulnerability Details Page --- ✅ Summary: This vulnerability allows unauthorized users to access arbitrary order data by forging cookies, affecting all GTM Server-Side plugin versions ≤ 3.1.4. It is recommended to immediately upgrade to version 3.1.5+ and strengthen cookie validation mechanisms.

Goal Reached Thanks to every supporter — we hit 100%!

Unauthenticated Order Data Exposure in GTM Server-Side Plugin via Cookie Manipulation

More from this source