high7.5
CVE-2020-13405
Microweber Discloses Sensitive Information
Impact
`userfiles/modules/users/controller/controller.php` in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a `/modules/ POST` request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | microweber/microweber | < 1.1.20 | 1.1.20 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | before 1.1.20 |