Microweber vulnerable to Improper Validation of Specified Quantity in Input

2022-02-1600:01:45

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free.

CPENameOperatorVersion
microweber/microwebereq1.2.9
microweber/microwebereq1.0.3
microweber/microwebereq1.2.5
microweber/microwebereq1.2.8
microweber/microwebereq1.2.3
microweber/microwebereq1.2.4
microweber/microwebereq1.1
microweber/microwebereq1.0.7
microweber/microwebereq0.951
microweber/microwebereq0.934

Name	Operator	Version
microweber/microweber	eq	1.2.9
microweber/microweber	eq	1.0.3
microweber/microweber	eq	1.2.5
microweber/microweber	eq	1.2.8
microweber/microweber	eq	1.2.3
microweber/microweber	eq	1.2.4
microweber/microweber	eq	1.1
microweber/microweber	eq	1.0.7
microweber/microweber	eq	0.951
microweber/microweber	eq	0.934