GHSA-hrf4-hcpc-3345HighCVSS 7.1

Denial of service in microweber

Published
March 16, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

📋 Description

Microweber is drag and drop website builder and CMS with E-commerce. The microweber prior 1.2.12 application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The post title input can be limited to 500 characters or max 1000 characters as a workaround.

🎯 Affected products1

  • composer/microweber/microweber:<= 1.2.11

🔗 References (4)