CVE-2023-6599

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6599
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/microweber/microweber/commit/f7eb9e1c6e801346f07f3b0164a01ac5f2ca5cfd Patch
https://huntr.com/bounties/6198785c-bf60-422e-9b80-68a6e658a10e Exploit Issue Tracking Patch Technical Description
Configurations

Configuration 1 (hide)

cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
History

12 Dec 2023, 17:22

Type Values Removed Values Added
First Time Microweber
Microweber microweber
CVSS v2 : unknown
v3 : 3.1 		v2 : unknown
v3 : 4.3
Summary
  • (es) Falta un mecanismo de manejo de errores estandarizado en el repositorio de GitHub microweber/microweber anterior a 2.0.
References () https://github.com/microweber/microweber/commit/f7eb9e1c6e801346f07f3b0164a01ac5f2ca5cfd - () https://github.com/microweber/microweber/commit/f7eb9e1c6e801346f07f3b0164a01ac5f2ca5cfd - Patch
References () https://huntr.com/bounties/6198785c-bf60-422e-9b80-68a6e658a10e - () https://huntr.com/bounties/6198785c-bf60-422e-9b80-68a6e658a10e - Exploit, Issue Tracking, Patch, Technical Description
CWE CWE-755
CPE cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*

08 Dec 2023, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-08 00:15

Updated : 2023-12-12 17:22

NVD link : CVE-2023-6599

Mitre link : CVE-2023-6599

CVE.ORG link : CVE-2023-6599

JSON object : View

Products Affected

microweber

  • microweber
CWE
CWE-755

Improper Handling of Exceptional Conditions

CWE-544

Missing Standardized Error Handling Mechanism