-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| laravel/framework | composer | >= 4.0.0, < 4.1.26 | 4.1.26 |
Miggo AIRoot Cause AnalysisThe vulnerability arises from static 'remember me' tokens that weren't refreshed during critical security events. The createRememberTokenIfDoesntExist method created a persistent token on first login but didn't cycle it on subsequent logins. The logout method failed to cycle the token, leaving sessions vulnerable. Both functions were directly involved in the lifecycle management of authentication tokens, making them key points of failure.