-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| flowise-ui | npm | < 3.0.10 | 3.0.10 |
Miggo AIRoot Cause AnalysisThe vulnerability lies in the backend's UserService.updateUser function, which is responsible for updating user details, including the password. The initial investigation using get_commit_urls_from_pull_request on the provided pull request URL pointed to a series of commits. Analyzing these commits with get_commit_infos revealed the exact code changes that patched the vulnerability. Specifically, commit f5c4f803e8d7bc890a905fc85e17e1301671a833 shows that the updateUser function was modified to require the user's oldPassword. Before the patch, the function would accept a new password and update it without any verification of the old one. The patch added logic to compare the provided oldPassword with the hash stored in the database, thus fixing the unverified password change vulnerability. The frontend code in packages/ui/src/views/account/index.jsx was also updated to include a field for the old password, confirming the fix. The vulnerable function is UserService.updateUser as it's the entry point on the server-side that processes the malicious request.
UserService.updateUserpackages/server/src/enterprise/services/user.service.ts
Ongoing coverage of React2Shell