HIGH

CVE-2022-0666

CVSS v3

7.5

HIGH

EPSS Score

28.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Technical details

Published
2/18/2022

Frequently asked questions

What is CVE-2022-0666?

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Is CVE-2022-0666 actively exploited?

Active exploitation of CVE-2022-0666 has not been confirmed. The EPSS score is 28.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-0666?

CVE-2022-0666 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2022-0666 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.