Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
Weakness
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Microweber | Microweber | * | 1.3.4 (excluding) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/233.html
- https://cwe.mitre.org/data/definitions/58.html
References
- https://github.com/microweber/microweber/commit/f43d5b767ad5814fc5f84bbaf0b77996262f3a4b
- https://huntr.dev/bounties/8f595559-7b4b-4b00-954c-7a627766e203
- https://github.com/microweber/microweber/commit/f43d5b767ad5814fc5f84bbaf0b77996262f3a4b
- https://huntr.dev/bounties/8f595559-7b4b-4b00-954c-7a627766e203