CVE-2023-6566
published 2023-12-07CVE-2023-6566: Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
PriorityP431medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
EPSS
0.49%
38.2th percentile
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ghost | sqlite3 | >= 0 < 3.22.0-1ubuntu0.7+esm1 | 3.22.0-1ubuntu0.7+esm1 |
| microweber | microweber | < 2.0.0 | 2.0.0 |
| microweber | microweber | >= 0 < 2.0.0 | 2.0.0 |
| microweber | microweber_microweber | >= unspecified < 2.0 | 2.0 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
osv7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
sqlite3 vulnerability
osv·2024-06-26·CVSS 7.3
CVE-2023-7104 sqlite3 vulnerability
sqlite3 vulnerability
USN-6566-1 fixed several vulnerabilities in SQLite. This update provides
the corresponding fix for CVE-2023-7104 for Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that SQLite incorrectly handled certain memory operations
in the sessions extension. A remote attacker could possibly use this issue
to cause SQLite to crash, resulting in a denial of service.
GHSA
Microweber Business Logic Errors
ghsa·2023-12-07
CVE-2023-6566 [MEDIUM] Microweber Business Logic Errors
Microweber Business Logic Errors
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted product(s) can be added to checkout.
OSV
Microweber Business Logic Errors
osv·2023-12-07
CVE-2023-6566 [MEDIUM] Microweber Business Logic Errors
Microweber Business Logic Errors
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted product(s) can be added to checkout.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74ehttps://huntr.com/bounties/cf4b68b5-8d97-4d05-9cde-e76b1a414fd6https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74ehttps://huntr.com/bounties/cf4b68b5-8d97-4d05-9cde-e76b1a414fd6
2023-12-07
Published