-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| drupal/core | composer | >= 8.0, < 8.2.3 | 8.2.3 |
| drupal/drupal | composer | >= 8.0, < 8.2.3 | 8.2.3 |
Miggo AIRoot Cause AnalysisThe vulnerability explicitly references the transliteration mechanism as the attack vector. The PhpTransliteration::transliterate() method is the core implementation of this functionality in Drupal 8.x. The CWE-20 (Improper Input Validation) alignment suggests the function failed to properly validate()/sanitize input before processing. The patched version (8.2.3) likely added input validation or optimized the algorithm to prevent CPU exhaustion via crafted inputs. While no direct commit diff is available, the function's role in URL processing and the vulnerability description strongly implicate it as the vulnerable component.
A Semantic Attack on Google Gemini - Read the Latest Research