-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.liferay.portal:release.portal.bom | maven | < 7.4.3.16 | 7.4.3.16 |
Miggo AIRoot Cause AnalysisThe vulnerability allows authenticated users to become wiki page owners through editing. This suggests flaws in: 1) The page update logic that handles ownership metadata (WikiPageLocalServiceImpl) and 2) The edit action controller that processes user input. Liferay's typical MVC architecture separates service layer (business logic) from web controllers (input handling), making these components likely candidates. The high confidence comes from the vulnerability pattern matching common authorization flaws in CRUD operations where ownership fields are mutable without proper checks.
A Semantic Attack on Google Gemini - Read the Latest Research