CVE-2023-1877

CRITICAL 9.8EPSS 1.8%

Command Injection in GitHub repository microweber/microweber prior to 1.3.3.

CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 6.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
CVSS v3.0: 6.1 MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
EPSS: 1.80% chance of exploitation in the next 30 days, 77th percentile
Published: 2023-04-05
Updated: 2025-02-10

Proof-of-concept exploits (1)

https://huntr.dev/bounties/71fe4b3b-20ac-448c-8191-7b99d7ffaf55

References

Related