-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.storm:storm-core | maven | >= 0.9.1-incubating, < 1.2.3 | 1.2.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper path validation in Logviewer's HTTP handlers. These functions process user-controlled file parameters to access logs but lack proper sanitization to prevent directory traversal. The high confidence comes from: 1) The CWE-200 pattern matches unvalidated file access patterns 2) The Logviewer component's explicit responsibility for file access 3) The vulnerability's description of arbitrary file read through endpoints 4) The fix version (1.2.3) likely added path normalization/validation in these core log retrieval functions.