GHSA-ghww-cv4v-hmxx

GitHub Security Advisory

Cross-Site Request Forgery microweber

✓ GitHub Reviewed MODERATE Has CVE

microweber prior to version 1.2.11 is vulnerable to Cross-Site Request Forgery (CSRF).

Packagist microweber/microweber

Affected versions: 0 (fixed in 1.2.11)

CVE-2022-0638

GHSA ID

GHSA-ghww-cv4v-hmxx

Published

February 18, 2022 12:00 AM

Last Modified

February 22, 2022 5:24 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

microweber/microweber

GitHub Reviewed

✓ Yes

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.