CVE-2022-0968

The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber

The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12.

Affected

microweber · microweber/microweber

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.0 HUNTR

7.2 HIGHCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CVSS v2.0 NVD

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

3.73% chance of exploitation in the next 30 days, 90th percentile

Nuclei

medium · CWE-190

Published

2022-03-15

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/97e36678-11cf-42c6-889c-892d415d9f9e

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0968.yaml

Security advisories

• microweber/microweber/commit/80e39084729a57dfe749626c3b9d35247a14c49e
• advisories/GHSA-5fxv-xx5p-g2fv

References

• CVE Record
• NVD entry