CVE-2019-19379

2019-11-2817:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

JSON

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.

CPENameOperatorVersion
mispeq2.3.78
mispeq2.3.79
mispeq2.4.90
mispeq2.4.55
mispeq2.3.92
mispeq2.3.146
mispeq2.4.72
mispeq2.4.110
mispeq2.4.5
mispeq2.3.19

Name	Operator	Version
misp	eq	2.3.78
misp	eq	2.3.79
misp	eq	2.4.90
misp	eq	2.4.55
misp	eq	2.3.92
misp	eq	2.3.146
misp	eq	2.4.72
misp	eq	2.4.110
misp	eq	2.4.5
misp	eq	2.3.19

Rows per page:

1-10 of 2841

References

github.com/MISP/MISP/commit/e05dc512a437284f14624da23cca4a829a76aebf