CVE-2022-0277: Microweber

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

Affected products

• Microweber Microweber: up to and including 1.2.10

Published 2022-01-20. Last modified 2026-06-17.