Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method

HIGH 7.5CVE-2023-48122 · GHSA-p8q6-qrgj-7gx2 · Published 08/12/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
microweber/microweber Packagist	`≥ 2.0.1, < 2.0.4`	`2.0.4`
microweber microweber	`≥ 2.0.1, < 2.0.4`	`2.0.4`

Description

An issue present in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.

NVD description

An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.