CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Scoring

Severity

HIGH

CVSS base score

7.6

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

EPSS probability

28.90%

CWE

CWE-93

Published

2022-02-18

Last modified

2026-03-13

Affected products

• microweber microweber/microweber

Weakness type

• CWE-93

Related vulnerabilities

• CVE-2021-39172 — New line injection during configuration edition
• CVE-2024-51501 — CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
• CVE-2024-32986 — Arbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox
• CVE-2025-40671 — SQL injection vulnerability in AES Multimedia's Gestnet
• CVE-2026-29046 — TinyWeb: HTTP Header Control Character Injection into CGI Environment
• CVE-2025-8715 — PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server
• CVE-2026-23953 — Incus container environment configuration newline injection
• CVE-2025-53094 — ESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp

Markdown version · Browse all CVEs