CVE-2020-23139

5.5 mediumEPSS 0.3%

Medium (5.5) in microweber microweber. EPSS 0.3% chance of exploitation in the next 30 days.

Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-11-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microweber:microweber

References

https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6
https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6

Check your stack JSON