{"action":"Upgrade microweber/microweber to 1.2.11 or later.","affected":[{"fixed":"1.2.11","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2025-34076"],"ecosystem":"Packagist","epss":0.02236,"exploited":false,"fixed_versions":["1.2.11"],"ghsa_id":"GHSA-j64v-xh5w-8hqj","id":"tcs_01M5KF49ASZR2RTXQ340D9KB5R","modified_at":"2025-07-03T14:12:15.145533Z","published_at":"2025-07-02T21:32:00Z","references":["https://osv.dev/vulnerability/GHSA-j64v-xh5w-8hqj","https://nvd.nist.gov/vuln/detail/CVE-2025-34076","https://github.com/microweber/microweber/commit/572bdc36b5b47923790016f6b961c8df53226855","https://github.com/microweber/microweber/commit/98d025467128ecc24195dcb56c533febc3c91af6","https://github.com/microweber/microweber","https://huntr.com/bounties/09218d3f-1f6a-48ae-981c-85e86ad5ed8b","https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/gather/microweber_lfi.rb","https://vulncheck.com/advisories/microweber-cms-lfi"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-j64v-xh5w-8hqj","url":"https://osv.dev/vulnerability/GHSA-j64v-xh5w-8hqj"},{"source":"nvd","source_id":"CVE-2025-34076","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-34076"}],"summary":"Microweber CMS API has authenticated local file inclusion vulnerability"}