GHSA-3qr6-qrqm-8v86HighCVSS 7.5

Integer Overflow or Wraparound in Microweber

Published
March 23, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-1036 →

📋 Description

In Microweber prior to 1.2.12, a user can create an account with a password thousands of characters in length, leading to memory corruption/integer overflow. Version 1.2.2 sets maximum password length at 500 characters.

🎯 Affected products1

  • composer/microweber/microweber:< 1.2.12

🔗 References (4)