-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.openapitools:openapi-generator-online | maven | < 7.6.0 | 7.6.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from the unvalidated use of 'opts.getOptions().get("outputFolder")' to construct the destPath variable. The pre-patch code dynamically derived the output directory from user input, enabling path traversal attacks. The fix in the commit explicitly removes this user-controlled parameter and hardcodes the destPath generation, confirming this was the vulnerable code path. The CWE-22 classification and advisory description directly align with this insecure handling of the outputFolder parameter.
Ongoing coverage of React2Shell