-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.0, < 4.0.10.16 | 4.0.10.16 |
| phpmyadmin/phpmyadmin | composer | >= 4.4, < 4.4.15.7 | 4.4.15.7 |
| phpmyadmin/phpmyadmin | composer | >= 4.6, < 4.6.3 | 4.6.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper error handling and input validation across multiple components. The patches explicitly address: 1) Type checks in OpenID identifier handling (examples/openid.php), 2) Missing config directory handling (setup/config.php), 3) Array parameter processing in FormDisplay (libraries/config/FormDisplay.php), 4) Input validation gaps in Validator class (libraries/config/Validator.php), and 5) Unsanitized error messages in validate.php. Each vulnerable function allowed unhandled exceptions/errors to leak full path information when receiving malformed inputs, as confirmed by the commit diffs and CVE description.