-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper permission configuration in schema.py templates. The key change in the patch (a403c29ffaf9) shows the replacement of unrestricted 'addPermissionToRole('User', 'View', 'user')' calls with property-limited permissions. This indicates the original function calls without property restrictions were the vulnerability source. The function is part of multiple template schemas (classic, devel, etc.), making it the consistent vulnerable pattern across installations.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| roundup | pip | < 1.5.1 | 1.5.1 |