CVE-2023-6566: Business Logic Errors in microweber/microweber

Q: What is CVE-2023-6566?

CVE-2023-6566 is a vulnerability that allows unpublished and deleted products to be added to checkout in the microweber/microweber GitHub repository prior to version 2.0.0.

Q: How severe is CVE-2023-6566?

CVE-2023-6566 has a severity rating of 5.9 (medium).

Q: How can I fix CVE-2023-6566?

To fix CVE-2023-6566, you should update the microweber/microweber package to version 2.0.0 or higher.

Q: Where can I find more information about CVE-2023-6566?

You can find more information about CVE-2023-6566 on the following references: [Huntr](https://huntr.com/bounties/cf4b68b5-8d97-4d05-9cde-e76b1a414fd6), [GitHub Commit](https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74e), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-6566).

Q: What is the CWE of CVE-2023-6566?

The CWE of CVE-2023-6566 is CWE-840 (Business Logic Errors).

Published Dec 7, 2023

Updated

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

Affected Software

2 affected componentsFixes available

composer/microweber/microweber<2.0.0

2.0.0

Microweber Microweber<2.0.0

Remediation

Patch Available

https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74e

Event History

Dec 7, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

12:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Advisory Published

12:30 AM

Frequently Asked Questions

What is CVE-2023-6566?

CVE-2023-6566 is a vulnerability that allows unpublished and deleted products to be added to checkout in the microweber/microweber GitHub repository prior to version 2.0.0.

How severe is CVE-2023-6566?

CVE-2023-6566 has a severity rating of 5.9 (medium).

How can I fix CVE-2023-6566?