Skip to content
OpenAdvisories
High · 7.2 CVE-2022-0921 EUVD-2022-1453GHSA-j878-43hm-8gr5

Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber

Published Mar 11, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.12 1.2.12

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.12 1.2.12 GHSA-j878-43hm-8gr5

References