漏洞描述
Microweber before 1.2.11 is susceptible to information disclosure. An error message is generated in microweber/microweber which contains sensitive information while viewing comments from load_module:comments#search=. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
huntr.devhttps://huntr.dev/bounties/01fd2e0d-b8cf-487f-a16c-7b088ef3a291/↗github.comhttps://github.com/advisories/GHSA-hhrj-wp42-32v3↗huntr.devhttps://huntr.dev/bounties/01fd2e0d-b8cf-487f-a16c-7b088ef3a291↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-0660↗github.comhttps://github.com/microweber/microweber/commit/2417bd2eda2aa2868c1dad1abf62341f22bfc20a↗