CVE-2022-0762

Description

Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it.

Affected packages (1)

• Packagist/microweber/microweberfrom 0, < 1.3.0

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-0762
• PATCHhttps://github.com/microweber/microweber
• WEBhttps://github.com/microweber/microweber/commit/76361264d9fdfff38a1af79c63141455cc4d36e3
• WEBhttps://huntr.dev/bounties/125b5244-5099-485e-bf75-e5f1ed80dd48