-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/bytebase/bytebase | go | >= 0.1.0, <= 1.0.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing authorization checks in API endpoints handling issue data. Both functions interact directly with the vulnerable '/issue' endpoint without validating user privileges. The frontend store module (issue.ts) contains these functions that make unprotected requests, as evidenced by the referenced code lines (108-187) which show no role validation in the API calls. The PoC demonstrates that low-privilege users can access admin issues through these endpoints, confirming the lack of server-side authorization enforced at the API layer.
KEV Misses 88% of Exploited CVEs- Get the report