{"action":"Upgrade microweber/microweber to 1.2.11 or later.","affected":[{"fixed":"1.2.11","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2022-0277"],"ecosystem":"Packagist","epss":0.01121,"exploited":false,"fixed_versions":["1.2.11"],"ghsa_id":"GHSA-vcgf-vmpc-ph79","id":"tcs_01M5KF92K3ED4JTNESHF225SBH","modified_at":"2024-02-16T08:06:19.935614Z","published_at":"2022-01-21T18:06:16Z","references":["https://osv.dev/vulnerability/GHSA-vcgf-vmpc-ph79","https://nvd.nist.gov/vuln/detail/CVE-2022-0277","https://github.com/microweber/microweber/commit/e680e134a4215c979bfd2eaf58336be34c8fc6e6","https://github.com/microweber/microweber","https://huntr.dev/bounties/0e776f3d-35b1-4a9e-8fe8-91e46c0d6316"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vcgf-vmpc-ph79","url":"https://osv.dev/vulnerability/GHSA-vcgf-vmpc-ph79"}],"summary":"Microweber Incorrect Permission Assignment for Critical Resource vulnerability"}