CVE-2021-39302

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions'org' value...

PT-2021-22511

Name of the Vulnerable Software and Affected Versions MISP version 2.4.148 Description The issue allows SQL injection via the app/Model/Log.php $conditions'org' value in certain configurations. Recommendations For MISP version 2.4.148, consider restricting access to the app/Model/Log.php file unt...

CVE-2021-39302: Improper Neutralization of Special Elements used in an SQL Command

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions'org' value...