CVE-2022-0855 - Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Back Back to CVE browser

MEDIUM

Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Published Mar 4, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.99%

Description

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.

Affected products

Vendor Microweber-Dev Product Microweber-Dev/whmcs Plugin Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <0.0.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microweber-Dev

Microweber-Dev/whmcs Plugin

n/a

Version	Status	Constraints
unspecified	affected	<0.0.4

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-41

CWE-706

References (2)

https://github.com/microweber-dev/whmcs_plugin/commit/2e7a11d332db79cc52ccda00455a15f4dc6147ff
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/511879b0-cdaa-4c03-af92-deb54d46284a
x_refsource_CONFIRMExploitPatchThird Party Advisory

Link	Providers	Tags
https://github.com/microweber-dev/whmcs_plugin/commit/2e7a11d332db79cc52ccda00455a15f4dc6147ff		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/511879b0-cdaa-4c03-af92-deb54d46284a		x_refsource_CONFIRMExploitPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Mar 4, 2022

Updated Aug 2, 2024

Reserved Mar 4, 2022

Link CVE-2022-0855

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-0855

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-0855