~ / search / GHSA-p8q6-qrgj-7gx2

GHSA-p8q6-qrgj-7gx2

Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method

Source: GitHub Advisory Database (reviewed) High CVE-2023-48122

Packages

EcosystemPackageAffectedFixed in
Packagist microweber/microweber >= 2.0.1, < 2.0.4 2.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

An issue present in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.

References

External links from the advisory. They lead to third-party sites.