-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pimcore/admin-ui-classic-bundle | composer | < 1.2.0 | 1.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from rendering PDF previews without sanitizing JavaScript content. The patches introduced PDF scanning checks (getResponseByScanStatus) in both getPreviewDocumentAction and showVersionAction, confirming these were the entry points for unsanitized content. The pre-patch code lacked these security checks, making these functions directly responsible for the XSS vulnerability.