4.3
CVE-2023-6599
- EPSS 0.49%
- Veröffentlicht 08.12.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 08:44:10
- Quelle security@huntr.dev
- CVE-Watchlists
- Unerledigt
LoginMissing Standardized Error Handling Mechanism in microweber/microweber
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microweber ≫ Microweber Version < 2.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.382 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| security@huntr.dev | 3.1 | 1.6 | 1.4 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
|
CWE-544 Missing Standardized Error Handling Mechanism
The product does not use a standardized method for handling errors throughout the code, which might introduce inconsistent error handling and resultant weaknesses.
CWE-755 Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.
https://github.com/microweber/microweber/commit/f7eb9e1c6e801346f07f3b0164a01ac5f2ca5cfd
https://huntr.com/bounties/6198785c-bf60-422e-9b80-68a6e658a10e