Pre-auth Payment Amount Tampering in Balbooa Forms

Executive Summary

This vulnerability is a pre-authentication payment amount tampering issue in the Balbooa Forms Joomla extension versions before 2.4.3.2. The stripeCharges and payAuthorize endpoints accept payment amounts from client-controlled parameters without verifying them against the form's configured product prices. This allows unauthenticated attackers to manipulate payment amounts, purchase items for arbitrary prices like $0.01, and forge line items, quantities, and shipping details.

Useful 0 Not Useful 0

Impact Analysis

If you use the affected Balbooa Forms extension, an attacker could exploit this to pay less than the actual price for products or services, potentially causing financial losses. Since no authentication or CSRF checks are enforced, attackers can manipulate payments without access to user accounts. This could also lead to incorrect order processing and customer disputes.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may impact compliance with financial and data protection regulations. For GDPR, improper payment handling could lead to financial data breaches or unauthorized transactions, violating data integrity and confidentiality principles. For HIPAA, if payment data involves protected health information, unauthorized tampering could compromise compliance with security and privacy requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Update Balbooa Forms to version 2.4.3.2 or later to address the pre-authentication payment tampering vulnerability. Disable or restrict access to the stripeCharges and payAuthorize endpoints if updates are not immediately possible.

Useful 0 Not Useful 0