GHSA-2c7x-w3mx-h7p6

ghsaUSosv

Microweber file upload vulnerability

view advisory published 2023-11-30Licence: CC-BY-4.0

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-49052US	high8.8	2.46% (84th)	Exploit	2023-11-30
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

references

External citations — patches, advisories, analysis.

https://github.com/Cyber-Wo0dy/CVE-2023-49052WEB
https://github.com/Cyber-Wo0dy/report/blob/main/microweber/v2.0.4/microweber_unrestricted_uploadWEB
https://github.com/microweber/microweberPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2023-49052ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan