CVE-2022-0596

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-0596
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.

4.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://huntr.dev/bounties/f68b994e-2b8b-49f5-af2a-8cd99e8048a5 Exploit Issue Tracking Patch Third Party Advisory
https://github.com/microweber/microweber/commit/91a9d899741557c75050614ff7adb8c0e3feb005 Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
History

29 Jun 2023, 09:15

Type Values Removed Values Added
Summary Business Logic Errors in Packagist microweber/microweber prior to 1.2.11. Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.

26 Jun 2023, 19:38

Type Values Removed Values Added
CWE CWE-840 CWE-1284
Information

Published : 2022-02-15 14:15

Updated : 2023-06-29 09:15

NVD link : CVE-2022-0596

Mitre link : CVE-2022-0596

JSON object : View

Products Affected

microweber

  • microweber
CWE
CWE-1284

Improper Validation of Specified Quantity in Input