TI-2022-11993 Aliases CVE-2022-29534 GHSA-w4vp-6x5p-cm7m

An issue was discovered in MISP before 2.4.158.

LOW 36CWE-287Published 2022-04-20 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · High · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an "Accept: application/json" header.

Why it matters now

EPSS 0.01604 75th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:misp-project:misp::::::::	before 2.4.158	Vulnerable	Misp-project

cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:* Versions before 2.4.158 Vulnerable ·Misp-project

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-29534
2026-10-03 Alias added: GHSA-w4vp-6x5p-cm7m

References

Exploit 1

https://zigrin.com/cakephp-application-cybersecurity-research-the-impact-of-a-php-vulnerability-exploring-the-password-confirmation-bypass-in-misp/

Patch 1

https://github.com/MISP/MISP/commit/01120163a6b4d905029d416e7305575df31df8af

Advisory 2

TI-2022-23942 app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles… CVSS 3.1CRITICAL 9.8
TI-2025-41517 In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path. CVSS 3.1CRITICAL 9.0
TI-2023-18936 MISP 2.4.172 mishandles different certificate file extensions in server sync. CVSS 3.1HIGH 7.5
TI-2018-14106 An issue was discovered in MISP 2.4.9x before 2.4.99. CVSS 3.0HIGH 8.8
TI-2023-26503 An issue was discovered in MISP before 2.4.176. CVSS 3.1CRITICAL 9.8
TI-2023-26502 An issue was discovered in MISP before 2.4.176. CVSS 3.1CRITICAL 9.8

See all 140 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences