CVE-2022-0504
MEDIUMPackagist microweber/microweber <1.2.11 - Info Disclosure
Title source: llmDescription
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/285ff8a0-a273-4d62-ba01-3e4b4e18467b
Patch, Third Party Advisory x_refsource_misc
https://github.com/microweber/microweber/commit/e607e5f745cd99d5c06a7fce16b3577fab8e1250
Scores
CVSS v3
6.5
EPSS
0.0029
EPSS Percentile
52.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-209
Status
published
Products (2)
microweber/microweber
< 1.2.11
microweber/microweber
0Packagist
Published
Feb 08, 2022
Tracked Since
Feb 18, 2026