CVE-2022-2353: Cross-Site Request Forgery (CSRF) in microweber/microweber
Published Jul 9, 2022
·Updated
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.
Affected Software
1 affected component
Microweber Microweber<1.2.20
Remediation
Event History
Jul 9, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-2353.
2
What is the severity of CVE-2022-2353?
The severity of CVE-2022-2353 is medium with a severity value of 6.1.
3
What is the affected software for CVE-2022-2353?
The affected software for CVE-2022-2353 is Microweber Microweber up to version 1.2.20.
4
How can an attacker exploit CVE-2022-2353?
An attacker can exploit CVE-2022-2353 by stealing tokens to perform cross-site request forgery, fetching contents from the same site, and redirecting a user.
5
How can I fix CVE-2022-2353?
To fix CVE-2022-2353, update your Microweber Microweber software to version 1.2.20 or higher.