CVE-2018-19908: OS Command Injection
Published Dec 6, 2018
·Updated
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filename of the STIX import.
Affected Software
2 affected components
Misp Misp>=2.4.90<2.4.99
Misp-project Misp>=2.4.90<2.4.99
Remediation
Event History
Dec 6, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-19908?
CVE-2018-19908 is classified as a high severity vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2018-19908?
To fix CVE-2018-19908, upgrade MISP to version 2.4.99 or later.
3
Who is affected by CVE-2018-19908?
CVE-2018-19908 affects MISP versions from 2.4.90 to 2.4.98.
4
What type of vulnerability is CVE-2018-19908?
CVE-2018-19908 is a command injection vulnerability stemming from improper handling of filenames.
5
Can a malicious user exploit CVE-2018-19908?
Yes, a malicious authenticated user can exploit CVE-2018-19908 to execute arbitrary commands.