-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| froxlor/froxlor | composer | < 2.0.20 | 2.0.20 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing authentication attempt restrictions in the 2FA verification flow. The patch added: 1) Failure counter increments 2) Account lockout checks 3) Logging of excessive failures. The vulnerable code path is the 2fa_verify action handler in index.php, which processed 2FA codes without these protections prior to version 2.0.20. The commit diff clearly shows these security controls were added to this specific section.