Vulnerabilities > Microweber > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-02-18 CVE-2022-0666 CRLF Injection vulnerability in Microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.
network
low complexity
microweber CWE-93
5.0
2022-02-18 CVE-2022-0660 Information Exposure Through an Error Message vulnerability in Microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
network
low complexity
microweber CWE-209
5.0
2022-02-17 CVE-2022-0638 Cross-Site Request Forgery (CSRF) vulnerability in Microweber
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
4.3
2022-02-15 CVE-2022-0596 Improper Validation of Specified Quantity in Input vulnerability in Microweber
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.
network
low complexity
microweber CWE-1284
4.3
2022-02-15 CVE-2022-0597 Open Redirect vulnerability in Microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
5.8
2022-02-11 CVE-2022-0560 Open Redirect vulnerability in Microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
5.8
2022-02-08 CVE-2022-0504 Information Exposure Through an Error Message vulnerability in Microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
network
low complexity
microweber CWE-209
4.0
2022-02-08 CVE-2022-0505 Cross-Site Request Forgery (CSRF) vulnerability in Microweber
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
4.3
2022-01-26 CVE-2022-0378 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
network
microweber CWE-79
4.3
2022-01-20 CVE-2022-0281 Information Exposure vulnerability in Microweber
Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.
network
low complexity
microweber CWE-200
5.0