6 matches found
CVE-2024-57969
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search...
CVE-2024-57969
creationtimestamp| type| source ---|---|--- 2025-02-14 06:39:04+00:00| seen| https://infosec.exchange/users/cve/statuses/114000864455141980 2025-02-14 07:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4nsnzkeh2s 2025-02-14 07:25:25+00:00| seen|...
CVE-2024-57969
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search...
CVE-2024-57969
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search...
CVE-2024-57969
CVE-2024-57969 affects MISP prior to 2.4.198. The root cause is that app/Model/Attribute.php ignores an ACL during a GUI attribute search, which can bypass access controls when listing attributes. Impact details in the sources indicate low confidentiality impact and no data integrity/availability...
CVE-2024-57969
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search...