2 matches found
CVE-2026-91857
Affected versions of MISP expose several state-changing controller actions without restricting them to POST. The affected actions are: - EventReportsController::purgeUnusedPictures - NoticelistsController::enableNoticelist - ServersController::removeOrphanedCorrelations -...
5.4CVSS5.8AI score0.00214EPSS
SaveExploits0References4
CVE-2026-91857: Cross-Site Request Forgery (CSRF)
Affected versions of MISP expose several state-changing controller actions without restricting them to POST. The affected actions are: - EventReportsController::purgeUnusedPictures - NoticelistsController::enableNoticelist - ServersController::removeOrphanedCorrelations -...
5.3CVSS5.8AI score0.00214EPSS
SaveExploits0References2
20