In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

Published Jul 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre