CVE-2022-0895

Critical

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

@huntrdev·CWE-94·Published 2022-03-10

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

78 chars

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

NVDen

78 chars

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

OSV.deven

127 chars

Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection.

GHSAen

127 chars

Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection.

NVDes

109 chars

Una Inyección de Código Estático en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	cve.org	7.7	—	—	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
3.0	Primary	cve.org	7.7	—	—	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
3.0	Secondary	NVD	7.7	1.8	5.3	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	GHSA	7.7	—	—	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H