CVE-2022-0968

The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber

State
Published
Severity
7.2 High
Published
Mar 15, 2022
Updated
Aug 2, 2024
Reserved
Mar 14, 2022

Read the record on cve.org

Description

The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12.

Scores

CVSSScoreVectorSource
3.07.2 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H@huntrdev

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
microweber/microwebermicroweber
  • before 1.2.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.