-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | < 2.4.10 | 2.4.10 |
| moodle/moodle | composer | >= 2.5.0, < 2.5.6 | 2.5.6 |
| moodle/moodle | composer | >= 2.6.0, < 2.6.3 | 2.6.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from procedural code in login/token.php that generated MoodleMobile tokens without setting an expiration date (validuntil). The patch explicitly adds this field. However, the code modification occurs in the main script flow rather than within a named function. No specific functions (e.g., class methods or standalone functions) are directly implicated in the vulnerability documentation or patches. The issue resides in the token creation logic at the script level, not within a discrete function.
A Semantic Attack on Google Gemini - Read the Latest Research