Critical · 9.8 CVE-2024-29859 EUVD-2024-26850GHSA-g52c-2cj5-jgxg

In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.

Published Mar 21, 2024 · Updated Aug 5, 2024 · Assigned by mitre

Description

In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.

Advisories 1

WID-SEC-2024-0683 MISP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 24, 2024

References

https://github.com/MISP/MISP/commit/238010bfd004680757b324cba0c6344f77a25399