microweber/microweber · Security
Unrestricted Upload of File with Dangerous Type in Microweber
- GHSA ID
- GHSA-j878-43hm-8gr5
- CVE ID
- CVE-2022-0921
- Severity
- medium
- Published
- Updated
- CVSS
- 6.7 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 6.7 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution.
CWEs
- CWE-434 · Unrestricted Upload of File with Dangerous Type