Use of Hard-coded Credentials in microweber/microweber
CVE-2023-5318

5.8MEDIUM

Key Information:

Vendor
Microweber
Status
Microweber/microweber
Vendor
CVE Published:
30 September 2023

Summary

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.

Affected Version(s)

microweber/microweber < 2.0

References

https://huntr.dev/bounties/17826bdd-8136-48ae-afb9-af627c...
https://github.com/microweber/microweber/commit/c48b34dfd...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.