CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

CVE-2023-48657

CVE-2023-48657 affects MISP before 2.4.176. The vulnerability stems from mishandling of filters in app/Model/AppModel.php, as described across multiple feeds (NVD/Red Hat/OSV/etc.). Impact is high: the CVSS 3.1 base score is 9.8 (HIGH/CRITICAL) with NETWORK attack vector, NO user interaction, and...

PT-2023-30878

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.176 Description An issue was discovered in the app/Model/AppModel.php file, where it mishandles filters. Recommendations For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176 that stems from filters...

CVE-2023-48659

CVE-2023-48659 affects MISP prior to 2.4.176. The issue resides in app/Controller/AppController.php where parameter parsing is mishandled, enabling a high-impact vulnerability per CVSS 3.1 (CRITICAL, 9.8; NETWORK, no user interaction). The connected sources confirm the vulnerable component and it...

CVE-2023-48656

CVE-2023-48656 affects MISP versions prior to 2.4.176 due to a flaw in app/Model/AppModel.php that mishandles order clauses. The issue’s impact is described as high for confidentiality, integrity, and availability. The connected documents confirm the affected software/version range and the root c...

CVE-2023-48658

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space...

CVE-2023-48656

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...

CVE-2023-48658

The CVE-2023-48658 entry affects MISP prior to 2.4.176. The vulnerability lies in app/Model/AppModel.php, which lacks a checkParam function for allowed characters (alphanumerics, underscore, dash, period, space). This could allow improper input handling leading to a CRITICAL impact (per CVSS 3.1:...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176, which stems from the...

CVE-2023-48659

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...

CVE-2023-48656

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...

CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

CVE-2023-48655

An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters...

CVE-2023-6063

creationtimestamp| type| source ---|---|--- 2023-11-15 12:43:59+00:00| published-proof-of-concept| https://t.me/itsecnews/3681 2023-11-15 15:20:06+00:00| published-proof-of-concept| https://t.me/truesecator/5087 2023-11-16 09:18:29+00:00| published-proof-of-concept| https://t.me/hackyourmom/5973...

CVE-2023-36427

creationtimestamp| type| source ---|---|--- 2023-11-15 04:52:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5803 2023-11-15 15:55:39+00:00| published-proof-of-concept| Telegram/AOpvdTsjzp7H3NHE-unulMxXJPzXcZMNwS8LLyL1I0LOWQ 2023-11-16 11:01:01+00:00| published-proof-of-concept|...

CVE-2023-36036

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...

CVE-2023-36033

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...

CVE-2023-36025

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160 2023-11-15 12:34:59+00:00| seen| https://t.me/truesecator/5085 2023-11-17 08:13:29+00:00|...

CVE-2023-26035

creationtimestamp| type| source ---|---|--- 2023-11-10 20:44:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zonemindersnapshots.rb 2023-12-11 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6140 2023-12-12...