-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| dolibarr/dolibarr | composer | < 18.0.0 | 18.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the /core/ajax/ajaxcompanies.php endpoint which was completely removed in the patched commit (3065b9c). Security advisories explicitly mention this endpoint as the attack vector, and the PoC demonstrates exploitation through it. The file deletion in the patch indicates it was the root cause. While other files show filter variable improvements, those appear to be code quality fixes rather than security fixes.