CVE-2022-0557: OS Command Injection in microweber/microweber
Published Feb 11, 2022
·Updated
OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
Affected Software
1 affected component
Microweber Microweber<1.2.11
Remediation
Event History
Feb 11, 2022
CVE Published
via MITRE·08:45 AM
Data Sourced
via MITRE·08:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0557?
CVE-2022-0557 has been classified as a high severity vulnerability due to the potential for remote code execution through OS command injection.
2
How do I fix CVE-2022-0557?
To fix CVE-2022-0557, upgrade to microweber version 1.2.11 or later, which addresses the vulnerability.
3
What types of systems are affected by CVE-2022-0557?
CVE-2022-0557 affects all versions of microweber prior to 1.2.11.
4
What is the impact of CVE-2022-0557?
The impact of CVE-2022-0557 includes the ability for an attacker to execute arbitrary commands on the server hosting the microweber application.
5
Is CVE-2022-0557 easy to exploit?
Yes, CVE-2022-0557 can be exploited by an attacker with minimal technical knowledge using crafted input to perform OS command injection.