MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.184, which stems from a...

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

CVE-2024-25675

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

CVE-2024-25675

CVE-2024-25675 affects MISP prior to 2.4.184. The issue allows a client to start an export generation process without using POST, related to files app/Controller/JobsController.php and app/View/Events/export.ctp. According to connected sources, this could enable unintended initiation of export ta...

CVE-2024-25675

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-25674

CVE-2024-25674 affects MISP before 2.4.184. The issue is insecure organisation logo upload due to missing checks for file extension and MIME type, enabling potential abuse. CVSSv3.1 base score 9.8 (CRITICAL) with attack vector NETWORK, no auth, high impact to confidentiality, integrity, and avail...

PT-2024-21083 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.184 Description: An issue was discovered where a client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-25675

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

MISP 2.4.171 - Stored XSS Vulnerability

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low privileged account 1Click on...

MISP 2.4.171 Cross Site Scripting

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Date: 8th October 2023 Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low...

MISP 2.4.171 - Stored XSS

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Date: 8th October 2023 Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low...

CVE-2024-21626

creationtimestamp| type| source ---|---|--- 2024-01-31 22:35:37+00:00| seen| Telegram/g77oYQgQgNWeGzTKzEzBqvOnDry1Bvbe5EDmpRTUMlzAQ 2024-01-31 22:56:31+00:00| seen| https://t.me/ctinow/177150 2024-01-31 23:07:57+00:00| seen| https://t.me/KomunitiSiber/1424 2024-01-31 23:26:18+00:00| seen|...

CVE-2023-5612

creationtimestamp| type| source ---|---|--- 2024-01-26 03:26:10+00:00| seen| https://t.me/ctinow/173971 2024-03-06 17:00:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlabtagsrssfeedemaildisclosure.rb 2024-03-08 08:17:01+00:00| seen|...

CVE-2023-52251

creationtimestamp| type| source ---|---|--- 2024-01-25 22:26:20+00:00| seen| https://t.me/ctinow/173834 2024-01-26 14:49:19+00:00| seen| https://t.me/arpsyndicate/2973 2024-02-01 03:16:26+00:00| seen| https://t.me/ctinow/177279 2024-02-16 20:55:39+00:00| seen|...

CVE-2024-22729

creationtimestamp| type| source ---|---|--- 2024-01-25 16:27:28+00:00| seen| https://t.me/ctinow/173555 2024-02-01 20:16:35+00:00| seen| https://t.me/ctinow/177765 2024-02-18 15:11:57+00:00| seen| https://t.me/ctinow/187269 2024-06-24 12:06:04+00:00| seen|...

CVE-2024-23897

creationtimestamp| type| source ---|---|--- 2024-01-24 19:27:02+00:00| seen| https://t.me/ctinow/173030 2024-01-25 08:44:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6490 2024-01-25 12:59:42+00:00| seen| https://t.me/thehackernews/4456 2024-01-25 14:20:45+00:00|...

CVE-2024-23222

creationtimestamp| type| source ---|---|--- 2024-01-22 21:16:41+00:00| seen| https://t.me/ctinow/171433 2024-01-22 22:06:56+00:00| exploited| https://t.me/ctinow/171464 2024-01-22 22:06:57+00:00| exploited| https://t.me/ctinow/171465 2024-01-22 22:16:30+00:00| seen| https://t.me/ctinow/171467...

CVE-2024-21320

creationtimestamp| type| source ---|---|--- 2024-01-19 17:29:47+00:00| seen| https://t.me/arpsyndicate/2945 2024-03-19 13:05:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6816 2024-03-26 02:03:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10110...