Paper/Archive/CVE-2022-0688

CVE-2022-0688

microweber microweber/microweber — Business Logic Errors in microweber/microweber

EPSS 0.9%CVSS 9.4

critical.is priorityof 100

40

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 60.5.605 × 2012.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.

Affected

ProductAffectedFixed inSource

microweber/microweberunspecified – < 1.2.111.2.11CNA

Scores by source

@huntrdev (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

References

refhuntr.dev/bounties/051ec6d4-0b0a-41bf-9ded-27813037c9c9 refgithub.com/microweber/microweber/commit/a41f0fddaf08ff12b2b82506b1ca9490c93ab605