Skip to content
OpenAdvisories

Product · MISP

misp-stix

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.7

    Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

    A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to handle several parsing and loading failures. Because SystemExit inherits from BaseException r…

  • High 8.8

    Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

    A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining t…