GHSA-rp7f-fhm8-9hpf CVE-2022-33012
Account Takeover Through Password Reset Poisoning
- Severity
- 8.8 / 10
- High · CVSS 3.1
- Exploit chance (EPSS)
- 1.44%
- Chance of exploitation in the next 30 days. Higher than 73.19% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
- Fix
- None yet
- No fixed version published
Description
Microweber 1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack.
Affected versions
Packagist
| Package | Vulnerable | Fixed in |
|---|---|---|
| microweber/microweber | <= 1.2.15 |
No fix yet |
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Severity breakdown
CVSS 3.1 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- Required
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Weakness
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
How to prevent it
- Requirements: Programming languages and supporting technologies might be chosen which are not subject to these issues.
- Implementation: Utilize an appropriate mix of allowlist and denylist parsing to filter control-plane syntax from all input.
References
Advisories
Packages
Other links
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-vv4x-qcpq-wgrg Microweber vulnerable to Path Traversal | High | Also affects microweber/microweber |
| GHSA-6w5w-jx4x-vjvw Microweber Cross-site Scripting vulnerability | Medium | Also affects microweber/microweber |
| GHSA-5jg5-xqfw-rv92 Microweber has a Cross-site Scripting vulnerability | Medium | Also affects microweber/microweber |
| GHSA-2x2j-3c2v-g3c2 Microweber XSS Vulnerability in the homepage Endpoint | High | Also affects microweber/microweber |
| GHSA-mvj3-hc7j-vp74 Microweber has Reflected XSS Vulnerability in the layout Parameter | Medium | Also affects microweber/microweber |
| GHSA-8357-fjvx-xrm8 Microweber has Reflected XSS Vulnerability in the id Parameter | Medium | Also affects microweber/microweber |
| GHSA-782f-gxj5-xvqc Microweber Has Stored XSS Vulnerability in User Profile Fields | High | Also affects microweber/microweber |
| GHSA-j64v-xh5w-8hqj Microweber CMS API has authenticated local file inclusion vulnerability | High | Also affects microweber/microweber |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor