-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from two key factors: 1) Configuration loading from a file in an accessible location, and 2) Web server logic serving that file. The file_server.rs function would be responsible for serving static files from the web root, which in default configuration includes the sqlpage.json file. The configuration.rs function creates the vulnerable condition by storing credentials in a file that becomes web-accessible. Together they create the exposure path, even though the root cause is the insecure file serving capability combined with sensitive file location.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| sqlpage | rust | < 0.11.1 | 0.11.1 |