GHSA-hrf4-hcpc-3345
Denial of service in microweber
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | microweber/microweber | <= 1.2.11 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Microweber is drag and drop website builder and CMS with E-commerce. The microweber prior 1.2.12 application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The post title input can be limited to 500 characters or max 1000 characters as a workaround.
References
External links from the advisory. They lead to third-party sites.