Lucene search
Veracode Vulnerability DatabaseVERACODE:34479HistoryMar 02, 2022 - 6:50 a.m.
Authentication Bypass
2022-03-0206:50:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
30.5%
microweber/microweber is vulnerable to authentication bypass. The vulnerability exists in auth.php because the password reset is not handled properly which allows an attacker to send unlimited email to any mail address.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber/microweber | le | v1.2.11 | |
| microweber/microweber | le | 1.2.12.x-dev |
Related
osv
osv
CVE-2022-0777
2022-03-01 09:15:07
Rate limit missing in microweber
2022-03-02 00:00:19
huntr
huntr
Weak Password Recovery Mechanism for Forgotten Password
2022-02-25 11:36:45
github
github
Rate limit missing in microweber
2022-03-02 00:00:19
cvelist
cvelist
nvd
nvd
CVE-2022-0777
2022-03-01 09:15:07
cve
cve
CVE-2022-0777
2022-03-01 09:15:07
prion
prion
Default credentials
2022-03-01 09:15:00
cnvd
cnvd
Microweber Email Bombing Vulnerability
2022-03-03 00:00:00