-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability is caused by the exposure of the User::all() method, which retrieves all user data, through a POST request to /modules/. The patch removes the vulnerable code, indicating that User::all() is the key vulnerable function. The exact namespace of User might vary, but in a typical Laravel setup, it would be App\Models\User.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| microweber/microweber | composer | < 1.1.20 | 1.1.20 |
PHPPHPOngoing coverage of React2Shell