-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.sling:org.apache.sling.auth.core | maven | >= 1.4.0, < 1.4.2 | 1.4.2 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies AuthUtil#isRedirectValid as the flawed method. The CWE-200 (sensitive info exposure) aligns with the credential theft scenario. The method's purpose of validating redirect URLs matches the attack vector described, where improper validation would enable open redirect attacks. Multiple sources (CVE, GHSA, Apache mailing list) consistently reference this method as the root cause.
A Semantic Attack on Google Gemini - Read the Latest Research