Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-17015
HistoryMar 03, 2022 - 12:00 a.m.

Microweber Email Bombing Vulnerability

2022-03-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

30.5%

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to rate limit emails sent, which could be exploited to send unlimited emails to any email address.

CPENameOperatorVersion
microweber microweberlt1.3

0.001 Low

EPSS

Percentile

30.5%