Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-12800
HistoryFeb 14, 2022 - 12:00 a.m.

microweber cross-site request forgery vulnerability (CNVD-2022-12800)

2022-02-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
microweber
cross-site request forgery
vulnerability
online store management
united states
trusted user
attacker
unintended request
cnvd

EPSS

0.001

Percentile

31.8%

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site request forgery vulnerability exists in microweber, which stems from the fact that the product does not determine that a request originates from a trusted user. An attacker could send an unintended request to the server through this vulnerability.

EPSS

0.001

Percentile

31.8%