-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| idno/known | composer | <= 1.3.1 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability stems from improper authorization checks in the Homepage admin controller. While other admin pages use adminGatekeeper() to verify admin privileges, these functions use createGatekeeper() which only requires basic authentication. This matches the CWE-639 pattern where user-controlled access (basic login status) bypasses proper authorization checks (admin verification), enabling IDOR. The researcher's blog explicitly identifies these functions and the gatekeeper mismatch as the root cause.
Ongoing coverage of React2Shell