Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23139
Reference (s):
- https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6