CVE-2022-0277: 
PHP vulnerability analysis and mitigation

A vulnerability identified as CVE-2022-0277 was discovered in Microweber, related to improper access controls (CWE-732). The issue was identified in the users/search_authors API endpoint, which lacked proper authorization checks (Github Commit).

The vulnerability stems from insufficient access control in the users/searchauthors API endpoint. The issue was addressed by modifying the API exposure from 'apiexpose' to 'apiexposeadmin', indicating that the endpoint was previously accessible without proper administrative privileges (Github Commit).

The vulnerability could potentially allow unauthorized users to access author search functionality that should be restricted to administrators only, potentially exposing sensitive user information (Github Commit).

The issue has been patched by restricting the API endpoint to administrative access only through the implementation of 'apiexposeadmin' instead of the general 'api_expose' (Github Commit).