THREATIST.IORead the docs No MISP vulnerabilities are listed in CISA KEV.
183 records
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window.
A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export.
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting.
MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials.
A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents.
Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints.
CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality.
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint.
CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality.
MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow attributes.
A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit().
The LdapAuth and LinOTPAuth authentication plugins in MISP contain an authentication bypass vulnerability.
MISP allowed an authenticated site administrator to set the Kafka_rdkafka_config setting to an arbitrary filesystem path.
MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups.
Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) and ownership/scope foreign keys (event_id, org_id, user_id, sharing_group_id, galaxy_cluster_uui…
MISP is an open source threat intelligence and sharing platform.
The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees provided by the protocol…
An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement.
MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-to-HTTPS redirect: Redirect permanent / https://misp.example Apache’s Redirect directive appends any…
MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool.
MISP modules are autonomous modules that can be used to extend MISP for new services.
MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules.
The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension.