Skip to content
OpenAdvisories

Product · MISP

misp-stix

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Cross-Document Parser State Contamination in misp-stix

    A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and…

  • Medium 6.9

    STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

    A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadat…