Vulnerabilities

MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.

MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services.

When a regular user adds a reference between objects or attributes, MISP checks whether the user can access the overall event, but it does not always check whether the individual pieces of data are also allowed for that…

When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the same event.

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension.

MISP has a security issue that can let a user gain more access than their API key is supposed to allow.

The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths.

MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model.

MISP contains a DOM-based cross-site scripting (XSS) vulnerability in the contextual menu JavaScript component.

MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page.

MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galaxy name directly into HTML output via sprintf() without any HTML encoding.