-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| khoj-assistant | pip | < 1.14.0 | 1.14.0 |
Ongoing coverage of React2Shell
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stemmed from the auth function in auth.py (line 95) using request.query_params.get('next', '/') without proper validation. This allowed attackers to specify arbitrary URLs in the 'next' parameter. The patch introduced get_next_url() to validate URLs by checking if they're relative or match the current domain, confirming the original implementation lacked these safeguards. The function's direct use of user-controlled input for redirects without sanitization is the clear vulnerability vector.