-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.linkis:linkis-datasource | maven | >= 1.4.0, < 1.6.0 | 1.6.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from insufficient parameter filtering in MySQL JDBC URL handling within the DataSource Manager Module. The primary entry point (DataSourceManagerService.createDataSource) would process user-supplied parameters during data source creation, making it the logical location for missing validation. The DataSourceManagerMapper.insert method is included as a secondary candidate because persistence layers often mirror validation gaps. The high confidence for the service layer reflects the direct parameter handling described in advisories, while the DAO layer confidence is medium due to inferred data flow patterns.
A Semantic Attack on Google Gemini - Read the Latest Research