Headline
GHSA-p8q6-qrgj-7gx2: Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
An issue present in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.
Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
Moderate severity GitHub Reviewed Published Dec 8, 2023 to the GitHub Advisory Database • Updated Dec 8, 2023
Related news
CVE-2023-48122: Account Takeover through Login/Redirect · Issue #1042 · microweber/microweber
An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.