Microweber Incorrect Permission Assignment for Critical Resource vulnerability

2022-01-2118:06:16

Google

osv.dev

0.001 Low

EPSS

Percentile

26.1%

JSON

In Microweber prior to 1.2.11, a non-admin user is able to access other users’ sensitive information.

CPENameOperatorVersion
microweber/microwebereq1.2.9
microweber/microwebereq1.0.3
microweber/microwebereq1.2.5
microweber/microwebereq1.2.8
microweber/microwebereq1.2.3
microweber/microwebereq1.2.4
microweber/microwebereq1.1
microweber/microwebereq1.0.7
microweber/microwebereq0.951
microweber/microwebereq0.934

Name	Operator	Version
microweber/microweber	eq	1.2.9
microweber/microweber	eq	1.0.3
microweber/microweber	eq	1.2.5
microweber/microweber	eq	1.2.8
microweber/microweber	eq	1.2.3
microweber/microweber	eq	1.2.4
microweber/microweber	eq	1.1
microweber/microweber	eq	1.0.7
microweber/microweber	eq	0.951
microweber/microweber	eq	0.934