CVE-2022-0896 - Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber

HIGH

Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber

Published Mar 9, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.41%

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<1.3

No remediation recorded yet.

Weaknesses (2)

CWE-1336

CWE-94

Code Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1516		Advisory
https://github.com/advisories/GHSA-q9qc-pp5x-mc8c		Advisory
https://github.com/microweber/microweber/commit/e0224462b3dd6b1f7c6ec1197413afc6019bc3b5		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/113056f1-7a78-4205-9f42-940ad41d8df0		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0896