medium4.3
CVE-2022-0596
Microweber vulnerable to Improper Validation of Specified Quantity in Input
Impact
Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | microweber/microweber | < 1.2.11 | 1.2.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | before 1.2.11 |