Описание
The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in GitHub repository microweber/microweber prior to 1.2.12.
Ссылки
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.12 (исключая)
cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.01843
Низкий
7.1 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-190
CWE-190
Связанные уязвимости
EPSS
Процентиль: 83%
0.01843
Низкий
7.1 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-190
CWE-190