CVE-2023-1877

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Command Injection in GitHub repository microweber/microweber prior to 1.3.3.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

VendorProductVersions
microwebermicroweber/microweber>= unspecified, < 1.3.3

References

Timeline

Published
Apr 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-18785.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18795.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18806.1Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18815.4Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.CVE-2023-18825.4Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18835.4Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18846.1Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18855.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18869.8Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18874.3Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-18888.8The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due CVE-2023-18896.5The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is d
CVE-2023-1877: Critical severity, CVSS 9.8 | Vulnix