-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tripleo-heat-templates | pip | < 0.8.7 | 0.8.7 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from middleware ordering in Swift's proxy pipeline. The patch shows staticweb was moved after authentication middlewares. In vulnerable versions, staticweb's request handler would execute before auth checks. The call method of StaticWeb middleware (standard entry point in WSGI) would appear in profiler traces when processing unauthorized requests to protected resources, as it was positioned earlier in the pipeline.