PT-2023-18483 · Unknown · Microweber

Publicado 2023-04-22 · Atualizado 2023-05-02 · CVE-2023-2240

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions microweber versions prior to 1.3.4

Description The issue concerns Improper Privilege Management in the microweber repository. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Technical details about exploitation are not specified.

Recommendations For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-2240

GHSA-R6XQ-XCXC-FGHX

Produtos afetados

Microweber

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2240.json · Exploit
• https://github.com/microweber/microweber · Nota
• https://github.com/microweber/microweber/commit/f43d5b767ad5814fc5f84bbaf0b77996262f3a4b · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-2240 · Nota de Segurança
• https://huntr.dev/bounties/8f595559-7b4b-4b00-954c-7a627766e203 · Nota
• https://t.me/cibsecurity/62649 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-r6xq-xcxc-fghx · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-2240 · Aviso do Fabricante