Description
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.
Unscored
CVE-2019-12868
EUVD-2019-4447GHSA-p73m-v6fq-jvc8
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used …
Published Jun 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre