2 matches found
CVE-2024-29858: Incomplete Identification of Uploaded File Variables (PHP)
In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...
9.8CVSS5.8AI score0.00384EPSS
SaveExploits0References4
CVE-2022-29533: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...
6.1CVSS6.3AI score0.00838EPSS
SaveExploits0References8
20