-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| h2o | pip | <= 3.44.0.2 |
Miggo AIRoot Cause AnalysisThe vulnerability centers on uncontrolled file path construction during data exports. The description explicitly implicates CSV/XLS export functionality, and 'export_file' is a standard function name for this purpose in data processing libraries. The CWE-73/610 mapping confirms this is a path injection issue. While exact code isn't available, the pattern matches: 1) Export functions often take filenames as parameters 2) Unpatched versions would lack path normalization 3) The attack vector aligns with writing files via export endpoints.