漏洞描述
Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-0281↗github.comhttps://github.com/microweber/microweber/commit/e680e134a4215c979bfd2eaf58336be34c8fc6e6↗huntr.devhttps://huntr.dev/bounties/315f5ac6-1b5e-4444-ad8f-802371da3505↗github.comhttps://github.com/ARPSyndicate/cvemon↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗