Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-2368 EUVD-2022-6307GHSA-9wqr-9787-p4rf

Authentication Bypass by Spoofing in microweber/microweber

Published Jul 11, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.20 1.2.20

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.21 1.2.21 GHSA-9wqr-9787-p4rf

References