Packagist/microweber/microweber CVE-2022-0921: medium 6.7, EPSS 2.21%
Unrestricted Upload of File with Dangerous Type in Microweber
Action: Upgrade microweber/microweber to 1.2.12 or later.
composer require microweber/microweber:1.2.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.12 | - |
Fixed versions
| 1.2.12 |
Sources
- osv: GHSA-j878-43hm-8gr5
- https://nvd.nist.gov/vuln/detail/CVE-2022-0921
- https://github.com/microweber/microweber/commit/867bdda1b4660b0795ad7f87ab5abe9e44b2b318
- https://github.com/microweber/microweber
- https://huntr.dev/bounties/e368be37-1cb4-4292-8d48-07132725f622
CVE-2022-0921 · published · modified · JSON