Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34312
HistoryFeb 21, 2022 - 6:42 a.m.

Information Disclosure

2022-02-2106:42:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
microweber
vulnerability
information disclosure
search parameter

EPSS

0.007

Percentile

80.4%

microweber is vulnerable to information disclosure. Sensitive information are leaked via a 500 error message when a user enters anything in search= parameter as in https://demo.microweber.org/demo/admin/view:modules/load_module:comments#search= .

EPSS

0.007

Percentile

80.4%