PT-2023-32038 · Unknown · Microweber

Publicado 2023-09-29 · Atualizado 2023-10-02 · CVE-2023-5318

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 2.0

Description The issue concerns the use of hard-coded credentials in the GitHub repository microweber/microweber. A patch is available and is anticipated to be part of version 2.0.

Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue. At the moment, there is no information about other mitigation measures for this vulnerability.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2023-5318

GHSA-R657-3WQH-G2X9

Produtos afetados

Microweber

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5318.json · Exploit
• https://github.com/microweber/microweber · Nota
• https://github.com/microweber/microweber/commit/c48b34dfd6cae7a55b452280d692dc62512574b0 · Correção
• https://t.me/cibsecurity/71358 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-5318 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r657-3wqh-g2x9 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-5318 · Nota de Segurança
• https://huntr.dev/bounties/17826bdd-8136-48ae-afb9-af627cb6fd5d · Nota
• https://twitter.com/CVEnew/status/1707923584575033711 · Publicação no Twitter