MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.

Published Nov 1, 2020 · Updated Aug 4, 2024 · Assigned by mitre