CVE-2020-29006

2020-11-2415:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.

CPENameOperatorVersion
mispeq2.3.165
mispeq2.3.175
mispeq2.4.37
mispeq2.3.125
mispeq2.1
mispeq2.4.56
mispeq2.3.72
mispeq2.4.121
mispeqcodename/tellurium
mispeq2.3.15

Name	Operator	Version
misp	eq	2.3.165
misp	eq	2.3.175
misp	eq	2.4.37
misp	eq	2.3.125
misp	eq	2.1
misp	eq	2.4.56
misp	eq	2.3.72
misp	eq	2.4.121
misp	eq	codename/tellurium
misp	eq	2.3.15

Rows per page:

1-10 of 3001

References

github.com/MISP/MISP/commit/423750573d07f1a463f115ef37182c1825080da4

github.com/MISP/MISP/compare/v2.4.134...v2.4.135