Filter
Versions
Misp Mispapp/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_para…
9.8
First published (updated )
Misp MispIn MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in …
9.8
First published (updated )
Misp MispIn MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Expl…
5.3
First published (updated )
Misp MispAn issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an expor…
9.8
EPSS
0.09%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Misp Mispapp/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin …
9.8
First published (updated )
Misp MispIn MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Misp MispAn issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypas…
9.8
First published (updated )
Misp MispIn app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagg…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Misp MispMISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, es…
6.5
First published (updated )
Misp Mispapp/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator becaus…
7.2
First published (updated )
Misp MispAn issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins…
6.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Misp MispMISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and a…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Misp MispAn issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.