CVE-2023-5976
published 2023-11-07CVE-2023-5976: Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
PriorityP421medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.39%
31.2th percentile
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microweber | microweber | < 2.0.0 | 2.0.0 |
| microweber | microweber | >= 0 < 2.0.0 | 2.0.0 |
| microweber | microweber_microweber | >= unspecified < 2.0 | 2.0 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvdv3.04.6MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Microweber Improper Access Control vulnerability
ghsa·2023-11-14
CVE-2023-5976 [MEDIUM] CWE-284 Microweber Improper Access Control vulnerability
Microweber Improper Access Control vulnerability
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.0.
OSV
Microweber Improper Access Control vulnerability
osv·2023-11-14
CVE-2023-5976 [MEDIUM] Microweber Improper Access Control vulnerability
Microweber Improper Access Control vulnerability
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/microweber/microweber/commit/bc537ebe235bf9924c6557a46114f5f9557cd16ahttps://huntr.com/bounties/2004e4a9-c5f6-406a-89b0-571f808882fahttps://github.com/microweber/microweber/commit/bc537ebe235bf9924c6557a46114f5f9557cd16ahttps://huntr.com/bounties/2004e4a9-c5f6-406a-89b0-571f808882fa
2023-11-07
Published