High severityNVD Advisory· Published Nov 30, 2023· Updated Aug 2, 2024

CVE-2023-49052

Description

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
microweber/microweberPackagist	<= 2.0.4	—

Affected products

Microweber/Microwebercpe-rescue
ghsa-coords
pkg:composer/microweber/microweber
Range: <= 2.0.4

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-2c7x-w3mx-h7p6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-49052ghsaADVISORY
github.com/Cyber-Wo0dy/report/blob/main/microweber/v2.0.4/microweber_unrestricted_uploadghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000