Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•5 views

CVE-2024-29859: Unrestricted Upload of File with Dangerous Type

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

9.8CVSS5.8AI score0.00823EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/30 12:00 a.m.•3 views

CVE-2020-15412: Missing Authorization

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

4.3CVSS5.8AI score0.00685EPSS
SaveExploits0References4
Rows per page
Query Builder