core.CRITICAL: Value "-1; waitfor delay '0:0:15' -- " is not numeric

Shopware 5
1

Ich habe seit gestern massiv folgende Fehlermeldung in verschiedenen Variationen. Es scheint aus der Suche zu kommen. Aber was ist das?

[2022-05-05 13:36:56] core.CRITICAL: Value "-1; waitfor delay ‚0:0:15‘ – " is not numeric. {„uid“:„07e7fdb“}
[2022-05-05 13:36:56] core.CRITICAL: Value "-1; waitfor delay ‚0:0:15‘ – " is not numeric. {„uid“:„07e7fdb“}
[2022-05-05 13:36:56] core.ERROR: Assert\InvalidArgumentException: Value "-1; waitfor delay ‚0:0:15‘ – " is not numeric. in /var/www/clients/client1/web3/web/vendor/beberlei/assert/lib/Assert/Assertion.php:288 Stack trace: #0 /var/www/clients/client1/web3/web/vendor/beberlei/assert/lib/Assert/Assertion.php(1011): Assert\Assertion::createException() #1 /var/www/clients/client1/web3/web/engine/Shopware/Bundle/SearchBundle/Condition/VoteAverageCondition.php(45): Assert\Assertion::numeric() #2 /var/www/clients/client1/web3/web/engine/Shopware/Bundle/SearchBundle/CriteriaRequestHandler/CoreCriteriaRequestHandler.php(151): Shopware\Bundle\SearchBundle\Condition\VoteAverageCondition->__construct() #3 /var/www/clients/client1/web3/web/engine/Shopware/Bundle/SearchBundle/CriteriaRequestHandler/CoreCriteriaRequestHandler.php(79): Shopware\Bundle\SearchBundle\CriteriaRequestHandler\CoreCriteriaRequestHandler->addRatingCondition() #4 /var/www/clients/client1/web3/web/engine/Shopware/Bundle/SearchBundle/StoreFrontCriteriaFactory.php(251): Shopware\Bundle\SearchBundle\CriteriaRequestHandler\CoreCriteriaRequestHandler->handleRequest() #5 /var/www/clients/client1/web3/web/engine/Shopware/Bundle/SearchBundle/StoreFrontCriteriaFactory.php(113): Shopware\Bundle\SearchBundle\StoreFrontCriteriaFactory->createCriteriaFromRequest() #6 /var/www/clients/client1/web3/web/engine/Shopware/Controllers/Frontend/Listing.php(140): Shopware\Bundle\SearchBundle\StoreFrontCriteriaFactory->createListingCriteria() #7 /var/www/clients/client1/web3/web/engine/Library/Enlight/Controller/Action.php(192): Shopware_Controllers_Frontend_Listing->manufacturerAction() #8 /var/www/clients/client1/web3/web/engine/Library/Enlight/Controller/Dispatcher/Default.php(478): Enlight_Controller_Action->dispatch() #9 /var/www/clients/client1/web3/web/engine/Library/Enlight/Controller/Front.php(228): Enlight_Controller_Dispatcher_Default->dispatch() #10 /var/www/clients/client1/web3/web/engine/Shopware/Kernel.php(188): Enlight_Controller_Front->dispatch() #11 /var/www/clients/client1/web3/web/vendor/symfony/http-kernel/HttpCache/SubRequestHandler.php(102): Shopware\Kernel->handle() #12 /var/www/clients/client1/web3/web/vendor/symfony/http-kernel/HttpCache/HttpCache.php(453): Symfony\Component\HttpKernel\HttpCache\SubRequestHandler::handle() #13 /var/www/clients/client1/web3/web/engine/Shopware/Components/HttpCache/AppCache.php(261): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward() #14 /var/www/clients/client1/web3/web/vendor/symfony/http-kernel/HttpCache/HttpCache.php(426): Shopware\Components\HttpCache\AppCache->forward() #15 /var/www/clients/client1/web3/web/vendor/symfony/http-kernel/HttpCache/HttpCache.php(317): Symfony\Component\HttpKernel\HttpCache\HttpCache->fetch() #16 /var/www/clients/client1/web3/web/engine/Shopware/Components/HttpCache/AppCache.php(188): Symfony\Component\HttpKernel\HttpCache\HttpCache->lookup() #17 /var/www/clients/client1/web3/web/vendor/symfony/http-kernel/HttpCache/HttpCache.php(192): Shopware\Components\HttpCache\AppCache->lookup

2

Scheint jemand über die Suche eine Attacke zu versuchen. Als GET Parameter wird hier in dem Beispiel wohl der Bewertungsfilter verwendet (kannst du nachvollziehen, indem du in der Suche mal einen Bewertungs-Filter auswählst und dann in der URL aus rating=[Irgendeine-Nummer] mal rating=test machst).

Fehler sagt aus, dass der Wert nicht numerisch ist.

3

Hallo,

Danke dir! Ich hab die IPs erstmal gesperrt. Bislang hat es das Problem gelöst.