Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/09/16 1:05 p.m.13 views

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

6.1AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:04 a.m.12 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS6.8AI score0.00738EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/23 5:29 p.m.22 views

Code injection

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS4.7AI score0.00738EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/03/23 5:29 p.m.28 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS4.6AI score0.00738EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/23 5:29 p.m.16 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

4.3CVSS7AI score
SaveExploits0References1
CVE
CVE
added 2018/03/23 5:00 p.m.50 views

CVE-2018-8949

CVE-2018-8949 involves MISP before 2.4.89, where a flaw in app/Model/Attribute.php creates an API integrity risk that could let a user delete attributes of other events. A crafted event edit (no attribute UUIDs but with attribute IDs set) could overwrite an existing attribute, potentially impacti...

5.5CVSS4.5AI score0.00738EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder