CVE-2022-0689 : Use multiple time the one-time coupon in Packagist microweber/microweber prior t

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.

Published 2022-02-19 16:15:09

Updated 2022-02-26 02:42:56

Source huntr.dev

View at NVD, CVE.org

Products affected by CVE-2022-0689

Microweber » Microweber
Versions before (<) 1.2.11
cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 40 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	huntr.dev
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

https://huntr.dev/bounties/fa5dbbd3-97fe-41a9-8797-2e54d9a9c649

Use multiple time the one-time coupon vulnerability found in microweber
Exploit;Issue Tracking;Patch;Third Party Advisory
https://github.com/microweber/microweber/commit/c3c25ae6c421bb4a65df9e0035edcc2f75594a04

update · microweber/microweber@c3c25ae · GitHub
Patch;Third Party Advisory

Jump to