Lucene search

GoogleOSV:GHSA-CFCG-2QGR-V243

HistoryJul 23, 2022 - 12:00 a.m.

Microweber before 1.2.21 vulnerable to reflected XSS

2022-07-2300:00:22

Google

osv.dev

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

28.8%

JSON

Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting (XSS).

CPENameOperatorVersion
microweber/microwebereq1.0.5
microweber/microwebereq0.951
microweber/microwebereq1.2.18
microweber/microwebereq1.2.9
microweber/microwebereq1.1
microweber/microwebereq0.931
microweber/microwebereq1.2.14
microweber/microwebereq1.0.4
microweber/microwebereq0.934
microweber/microwebereq1.2.17

Name	Operator	Version
microweber/microweber	eq	1.0.5
microweber/microweber	eq	0.951
microweber/microweber	eq	1.2.18
microweber/microweber	eq	1.2.9
microweber/microweber	eq	1.1
microweber/microweber	eq	0.931
microweber/microweber	eq	1.2.14
microweber/microweber	eq	1.0.4
microweber/microweber	eq	0.934
microweber/microweber	eq	1.2.17

Rows per page:

1-10 of 291

References

github.com/microweber/microweber

github.com/microweber/microweber/commit/d28655183800b833abb20ccd55e1628f16ff65e4

huntr.dev/bounties/3f1f679c-c243-431c-8ed0-e61543b9921b

nvd.nist.gov/vuln/detail/CVE-2022-2470

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

28.8%

JSON

Related for OSV:GHSA-CFCG-2QGR-V243