CVE-2022-0724

Medium

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

@huntrdev·CWE-922·Published 2022-02-23

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

98 chars

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

NVDen

98 chars

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

OSV.deven

150 chars

Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software.

GHSAen

150 chars

Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software.

NVDes

132 chars

Un Almacenamiento no Seguro de Información Confidencial en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.0	Primary	cve.org	9.1	—	—	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H