CVE-2020-8891

2020-02-1200:15:09

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

JSON

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.

CPENameOperatorVersion
mispeq2.3.78
mispeq2.3.79
mispeq2.4.90
mispeq2.4.55
mispeq2.3.92
mispeq2.3.146
mispeq2.4.72
mispeq2.4.110
mispeq2.4.5
mispeq2.3.19

Name	Operator	Version
misp	eq	2.3.78
misp	eq	2.3.79
misp	eq	2.4.90
misp	eq	2.4.55
misp	eq	2.3.92
misp	eq	2.3.146
misp	eq	2.4.72
misp	eq	2.4.110
misp	eq	2.4.5
misp	eq	2.3.19

Rows per page:

1-10 of 2861

References

github.com/MISP/MISP/commit/934c82819237b4edf1da64587b72a87bec5dd520

github.com/MISP/MISP/commit/c1a0b3b2809b21b4df8c1efbc803aff700e262c3

github.com/MISP/MISP/compare/v2.4.120...v2.4.121