CVE-2020-13405

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/…

published July 16, 2020

CVSS

—

EPSS

14%

Percentile

96.5

In the wild

Unconfirmed

What it is

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13614 · 96.5th percentile
Published: 2020-07-16T18:23Z

EPSS history

Timeline

16 JUL 18:23Z
userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/…
cvelistv5