Description
In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.
Advisories 1
- WID-SEC-2024-1965 MISP: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 1, 2024