← volver
CVE-2022-0906

Unrestricted file upload leads to stored XSS in microweber/microweber

CVSS 4.3 MEDIUMEPSS 0.6%CWE-79
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Productos afectados
microweber · microweber/microweber

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68https://huntr.dev/bounties/87ed3b42-9824-49b0-91a5-fd908a0601e8