Description
In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.
Advisories 1
- WID-SEC-2023-0172 MISP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 22, 2023
Critical · 9.8
CVE-2023-24028
EUVD-2023-28092GHSA-2p25-c5jm-68vm
In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.
Published Jan 20, 2023 · Updated Apr 3, 2025 · Assigned by mitre