CVE-2022-0666 - CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

Back Back to CVE browser

HIGH

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

Published Feb 18, 2022

7.5

HIGH

CVSS 3.1

EPSS 44.26%

Description

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Affected products

Vendor Microweber Product Microweber/microweber Default
unknown
Affected
- ≥ unspecified, < 1.2.11

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microweber	Microweber/microweber	unknown	Affected ≥ unspecified, < 1.2.11

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-93

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0798
Advisory
https://github.com/advisories/GHSA-3wwj-wh2w-g4xp
Advisory
https://github.com/microweber/microweber/commit/f0e338f1b7dc5ec9d99231f4ed3fa6245a5eb128
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/7215afc7-9133-4749-8e8e-0569317dbd55
x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0666

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0798		Advisory
https://github.com/advisories/GHSA-3wwj-wh2w-g4xp		Advisory
https://github.com/microweber/microweber/commit/f0e338f1b7dc5ec9d99231f4ed3fa6245a5eb128		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/7215afc7-9133-4749-8e8e-0569317dbd55		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0666