GHSA-j878-43hm-8gr5
GitHub Security Advisory
Unrestricted Upload of File with Dangerous Type in Microweber
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution.
Affected Packages
Packagist
microweber/microweber
Affected versions:
0
(fixed in 1.2.12)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 5, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.