-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-core | composer | >= 4.5.0, < 4.5.31 | 4.5.31 |
| typo3/cms-core | composer | >= 4.6.0, < 4.7.16 | 4.7.16 |
| typo3/cms-core | composer | >= 6.0.0, < 6.0.11 | 6.0.11 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies feuser_adminLib.inc as the vulnerable component and attributes the issue to mass assignment during record creation. Mass assignment vulnerabilities typically occur when functions bind user input to database fields without proper restrictions. While the exact function name isn't provided in the advisories, the file path and context (record creation in a deprecated library) strongly indicate that the record creation handler in this file lacked field validation. The confidence is high because the library's purpose and the vulnerability type align with the described attack vector.
PHPPHPOngoing coverage of React2Shell