Lucene search

K
osvGoogleOSV:GHSA-3WWJ-WH2W-G4XP
HistoryFeb 19, 2022 - 12:01 a.m.

CRLF Injection in microweber

2022-02-1900:01:35
Google
osv.dev
33
crlf injection
microweber
stack trace exposure
packagist
software

EPSS

0.032

Percentile

91.4%

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

EPSS

0.032

Percentile

91.4%