CVE-2021-39302

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions'org' value...

CVE-2021-39302

creationtimestamp| type| source ---|---|--- 2021-08-19 20:18:24+00:00| seen| https://t.me/cibsecurity/27613...

CVE-2021-39302

CVE-2021-39302 affects MISP 2.4.148 in certain configurations, where the vulnerability is an SQL injection in the file app/Model/Log.php, via the $conditions['org'] value. This is the concrete vulnerability detail described across connected records. The CVSS metrics provided indicate a high-impac...