CVE-2022-29528

2022-04-2023:15:08

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.

CPENameOperatorVersion
mispeq2.4.54
mispeq2.4.96
mispeq2.4.125
mispeq2.3.78
mispeq2.3.141
mispeq2.4.59
mispeq2.4.49
mispeq2.4.107
mispeq2.3.158
mispeq2.4.95

Name	Operator	Version
misp	eq	2.4.54
misp	eq	2.4.96
misp	eq	2.4.125
misp	eq	2.3.78
misp	eq	2.3.141
misp	eq	2.4.59
misp	eq	2.4.49
misp	eq	2.4.107
misp	eq	2.3.158
misp	eq	2.4.95

Rows per page:

1-10 of 3231

References

github.com/MISP/MISP/commit/0108f1bde2117ac5c1e28d124128f60c8bb09a8e

github.com/MISP/MISP/commit/93821c0de6a7dd32262ce62212773f43136ca66e

github.com/MISP/MISP/compare/v2.4.157...v2.4.158

zigrin.com/advisories/misp-phar-deserialization/

zigrin.com/cakephp-application-cybersecurity-research-exploring-the-phar-deserialization-php-vulnerability-a-white-box-testing-example/