GitHub Advisoryadvisory · Packagist

GHSA-3wwj-wh2w-g4xp CRLF Injection in microweber

HIGH Published 2022-02-19 Modified 2022-02-23 Official page ↗
Aliases
CVE-2022-0666
Ecosystem
Packagist
Packages
microweber/microweber
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Weaknesses
CWE-93
Reviewed
2022-02-23

Affected packages

• Packagist microweber/microweber: < 1.2.11 → fixed in 1.2.11

Description

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Related

Alias · CVE (1)

  • CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber… vulnerability

Weakness · CWE (1)

  • CWE-93 Improper Neutralization of CRLF Sequences weakness

References