GHSA-hrf4-hcpc-3345HighCVSS 7.1
Denial of service in microweber
🔗 CVE IDs covered (1)
📋 Description
Microweber is drag and drop website builder and CMS with E-commerce. The microweber prior 1.2.12 application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The post title input can be limited to 500 characters or max 1000 characters as a workaround.
🎯 Affected products1
- composer/microweber/microweber:<= 1.2.11