What is GHSA-89fp-j8v7-p82h?

GHSA-89fp-j8v7-p82h is a security advisory published by GitHub Security Advisories with High severity. Microweber allows Unrestricted File Upload

Which CVE IDs does GHSA-89fp-j8v7-p82h cover?

GHSA-89fp-j8v7-p82h covers the following CVE IDs: CVE-2020-13241. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-89fp-j8v7-p82h?

GHSA-89fp-j8v7-p82h has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-89fp-j8v7-p82h?

GHSA-89fp-j8v7-p82h affects 1 product, including: composer/microweber/microweber:\u003c= 1.1.18.

GHSA-89fp-j8v7-p82hHighCVSS 7.8

Microweber allows Unrestricted File Upload

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 21, 2023

🔗 CVE IDs covered (1)

CVE-2020-13241 →

📋 Description

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.

🎯 Affected products1

composer/microweber/microweber:<= 1.1.18

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-13241
https://gist.github.com/virendratiwari03/0af29841fdf27207eb3abc8f28d326f3
https://github.com/advisories/GHSA-89fp-j8v7-p82h