CVE-2019-12868

2019-06-1800:15:09

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

JSON

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.

CPENameOperatorVersion
mispeq2.3.78
mispeq2.3.79
mispeq2.4.90
mispeq2.4.55
mispeq2.3.92
mispeq2.3.146
mispeq2.4.72
mispeq2.4.5
mispeq2.3.19
mispeq2.3.152