Описание
The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12.
Ссылки
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.12 (исключая)
cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01425
Низкий
7.2 High
CVSS3
5.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-190
CWE-190
Связанные уязвимости
EPSS
Процентиль: 80%
0.01425
Низкий
7.2 High
CVSS3
5.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-190
CWE-190