-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| dompdf/dompdf | composer | >= 0.6, < 0.6.1 | 0.6.1 |
Miggo AIRoot Cause AnalysisThe vulnerability arises from two key functions:
eval if 'enable_php' was enabled. Combined with remote file inclusion, this allowed code execution. The patch removed the PHP evaluation code and added protocol restrictions, confirming these functions' roles in the vulnerability.