-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIA Semantic Attack on Google Gemini - Read the Latest Research
A Semantic Attack on Google Gemini - Read the Latest Research
Miggo AI
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ren.helloworld:upload-pgyer | maven | <= 1.32 | 1.33 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from handling credentials as plaintext Strings rather than using Jenkins' Secret class. The commit diff shows:
This indicates the original implementations stored credentials unencrypted in config.xml files through String-based serialization. The affected getter methods directly exposed these credentials to the configuration system without encryption, matching the CWE-311 description of missing sensitive data encryption.