CVE-2022-33012
1 advisory.
Packagist/microweber/microweber CVE-2022-33012: high 8.8, EPSS 1.41%
Account Takeover Through Password Reset Poisoning
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.2.15 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rp7f-fhm8-9hpf
- https://nvd.nist.gov/vuln/detail/CVE-2022-33012
- https://blog.jitendrapatro.me/cve-2022-33012-account-takeover-through-password-reset-poisoning
- https://github.com/microweber/microweber
- https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Account%20Takeover#account-takeover-through-password-reset-poisoning
- https://www.pethuraj.com/blog/how-i-earned-800-for-host-header-injection-vulnerability
CVE-2022-33012 · published · modified · JSON