-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.htmlunit:htmlunit | maven | < 2.70.0 | 2.70.0 |
Miggo AIRoot Cause AnalysisThe key evidence comes from the commit diff showing the replacement of recursive traversal with getNextElementUpwards(). The commit message explicitly states 'remove recursion' to address fuzzer findings. The vulnerability manifests when processing malicious DOM structures, and recursive methods without depth limits are classic triggers for stack overflow DoS. The patched version replaces recursion with a while loop, confirming the vulnerability was in the recursive implementation.
A Semantic Attack on Google Gemini - Read the Latest Research