-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Rambox | npm | <= 0.6.9 |
Miggo AIRoot Cause AnalysisWhile exact function names/paths aren't disclosed in available sources, the vulnerability pattern clearly indicates: 1) Input handling functions that store unsanitized user-controlled 'name' values 2) Rendering functions that dangerously output these values as HTML. The combination enables XSS->RCE via Electron's nodeIntegration. The confidence remains high because the attack vector (IMG onerror with exec) fundamentally requires both improper input handling and unsafe rendering to be exploitable.