-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| us.springett:alpine | maven | < 1.10.4 | 1.10.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the use of request.getRequestUri().getPath().contains("/api/swagger") in the AuthenticationFilter's filter method. This check fails to account for URL-encoded path parameters and path normalization, allowing attackers to craft URLs that satisfy the contains() condition while bypassing intended access controls. The direct match between the described bypass technique and the code structure confirms this function as the root cause.
JavaJavaOngoing coverage of React2Shell