microweber/microweber vulnerabilities

3 known vulnerabilities in microweber/microweber from Microweber. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  microweber/microweber: Incorrect Authorization

  CVE-2022-1631May 9, 2022MicroweberEPSS 8.85%

  Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Em

• 7.5 High severity

  microweber/microweber: Integer Overflow or Wraparound

  CVE-2022-1036Mar 22, 2022MicroweberEPSS 1.23%

  Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12.

• 7.5 High severity

  microweber/microweber: Improper Neutralization of CRLF Sequences

  CVE-2022-0666Feb 18, 2022MicroweberEPSS 44.3%

  CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.