Vulnerabilities

TI-2022-00424 CVE-2022-0504 · GHSA-xxq4-3742-3h28

Generation of Error Message Containing Sensitive Information in microweber/microweber

LOW 31

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01151 Published 2022-02-08 Fixed in 1.2.11 CWE-209

TI-2022-00425 CVE-2022-0505 · GHSA-7x2h-3v2v-24p9

LOW 30

Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00679 Published 2022-02-08 Fixed in 1.2.11 CWE-352

TI-2022-00426 CVE-2022-0506 · GHSA-jjvm-3mfq-7gc7

LOW 25

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00631 Published 2022-02-08 Fixed in 1.2.11 CWE-79