The Aimeos Laravel ecommerce platform 2021.10 LTS contains a critical SQL injection vulnerability that allows unauthenticated attackers to potentially disclose sensitive database schema information.

The application fails to properly sanitize the sort parameter within the jsonapi/review endpoint. This flaw allows an unauthenticated attacker to inject malicious SQL commands to reveal database table and column names through error-based responses.

The ability for an unauthenticated attacker to perform SQL injection poses a significant risk to data confidentiality. By mapping the database schema, an attacker can gain the necessary intelligence to launch further targeted attacks, such as unauthorized data exfiltration or potential compromise of the underlying application database. With a CVSS score of 8.2, this vulnerability represents a high-risk entry point that could lead to severe operational and reputational damage if exploited.

Immediate Action: Upgrade to a patched version of the Aimeos Laravel ecommerce platform that addresses this SQL injection vulnerability. If an update is not immediately feasible, disable the affected jsonapi/review endpoint until a patch can be applied.

Proactive Monitoring: Review web server and application logs for suspicious GET requests directed at the jsonapi/review endpoint, specifically monitoring for unusual values within the sort parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection patterns targeting the sort parameter.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the Exploit-DB entry 50538.

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability should be prioritized for immediate remediation. Security teams must verify their current version of the Aimeos Laravel ecommerce platform and apply the necessary security updates to prevent unauthorized database enumeration and potential subsequent compromise.