CVE-2022-1036 Able to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber

2022-03-2212:40:10

CWE-190

@huntrdev

www.cve.org

cve-2022-1036

microweber

github

memory corruption

integer overflow

account creation

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

EPSS

0.001

Percentile

37.9%

JSON

Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12.

CNA Affected

[
  {
    "product": "microweber/microweber",
    "vendor": "microweber",
    "versions": [
      {
        "lessThan": "1.2.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]