2 matches found
CVE-2024-29859: Unrestricted Upload of File with Dangerous Type
In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...
9.8CVSS5.8AI score0.00823EPSS
SaveExploits0References4
CVE-2020-15412: Missing Authorization
An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...
4.3CVSS5.8AI score0.00685EPSS
SaveExploits0References4
20