Exposure of Sensitive Information to an Unauthorized Actor in microweber

高危 7.5CVE-2022-0281 · GHSA-7wv8-g97r-432h · Published 20/01/2022 · updated 17/06/2026

要点

CVE-2022-0281 是影响 microweber/microweber, microweber (microweber) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：10.5%，高于 95.8% 的漏洞。
修复：升级到 1.2.11 或更高版本。

Package	Affected versions	Patched versions
microweber/microweber Packagist	`< 1.2.11`	`1.2.11`
microweber microweber	`≤ 1.2.10`	No fix yet

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.2.11

1.2.11

≤ 1.2.10

No fix yet

microweber/microweber 的其他漏洞

查看全部 →