[microweber/microweber] Integer Overflow or Wraparound in Microweber

In Microweber prior to 1.2.12, a user can create an account with a password thousands of characters in length, leading to memory corruption/integer overflow. Version 1.2.2 sets maximum password length at 500 characters.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-1036
• https://github.com/microweber/microweber/commit/82be4f0b4729be870ccefdae99a04833f134aa6a
• https://huntr.dev/bounties/db615581-d5a9-4ca5-a3e9-7a39eceaa424
• https://github.com/advisories/GHSA-3qr6-qrqm-8v86