Integer Overflow in microweber
Date: 2022-03
Affected: composer/microweber/microweber
Attack vector: dos
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2022-0968
CWE: CWE-190
CVSS: 7.2 (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)

Microweber is a new generation CMS with drag and drop. The microweber application allows large characters to insert in the input field "first & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The first name & last name input should be limited to 50 characters or max 100 characters


Mitigations:

Architectural layers (MAESTRO):