-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rdiffweb | pip | < 2.4.8 | 2.4.8 |
Miggo AIRoot Cause AnalysisThe GitHub patch modifies the error_page function to replace the message with a generic one for 404 errors, explicitly stating the default implementation leaked path info. The added test case in test_page_error.py demonstrates the vulnerability by checking for path sanitization. The CWE-460 description matches this pattern of improper exception cleanup exposing sensitive information through unhandled error messages.
PythonPython