Authentication Bypass by Spoofing in GitHub repository microweber/microweber before 1.2.20.
microweber microweber