-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| shopware/platform | composer | < 6.2.3 | 6.2.3 |
Miggo AIRoot Cause AnalysisThe vulnerability exists in the 'Mediabrowser upload by URL' feature, which inherently requires a function to fetch remote resources. The FileUrlLoader::loadFromURL is the logical component responsible for processing user-supplied URLs in media upload operations. The SSRF exploit would occur when this function accepts unfiltered URLs and initiates requests to internal network resources. The patch in 6.2.3 likely added protocol validation, domain restrictions, or network boundary checks to this function.