-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIA Semantic Attack on Google Gemini - Read the Latest Research
A Semantic Attack on Google Gemini - Read the Latest Research
Miggo AI
Miggo AIRoot Cause AnalysisThe vulnerability stems from redundant caching mechanisms in theme processing. The patch explicitly disables Minify's internal cache (via setCache(null, false)) in both theme/javascript.php and theme/styles.php, indicating these functions were improperly writing to temporary directories. The pre-patch use of setCache('', true) likely defaulted to the system temp directory with insecure permissions, aligning with CWE-379. The direct correlation between the vulnerability description and the patched functions justifies high confidence.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | >= 2.0, < 2.0.4 | 2.0.4 |
| moodle/moodle | composer | >= 2.1, < 2.1.1 | 2.1.1 |