Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-13405

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pmxg-w9c7-ffmq

Microweber Discloses Sensitive Information `userfiles/modules/users/controller/controller.php` in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a `/modules/ POST` request.

gitlab/packagist/microweber/microweber/CVE-2020-13405

Missing Authentication for Critical Function userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.