CVE-2022-27245: SSRF

Published Mar 18, 2022
·
Updated

An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.

Affected Software

2 affected components
Misp Misp<2.4.156
Misp-project Misp<2.4.156

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade MISP to a version that resolves this vulnerability.

    Fixed in 2.4.156
  2. Configuration

    Restrict generateServerSettings to only run when invoked from the command line (ensure the code path only executes in a CLI context)

    app/Model/Server.php generateServerSettings access = CLI-only

Event History

Mar 18, 2022
CVE Published
via MITRE·05:14 PM
Data Sourced
via MITRE·05:14 PM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is CVE-2022-27245?

CVE-2022-27245 is a vulnerability discovered in MISP before version 2.4.156 that could lead to SSRF.

2

What is the severity of CVE-2022-27245?

The severity of CVE-2022-27245 is high with a CVSS score of 8.8.

3

How does CVE-2022-27245 affect MISP?

CVE-2022-27245 affects MISP versions up to and excluding 2.4.156.

4

What is SSRF?

Server-Side Request Forgery (SSRF) refers to a vulnerability that allows an attacker to make arbitrary requests from the vulnerable server.

5

How can I fix CVE-2022-27245 in MISP?

To fix CVE-2022-27245 in MISP, upgrade to version 2.4.156 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203