2 matches found
CVE-2022-25048
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.