MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176 that stems from filters...

CVE-2023-48655

An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters...

CVE-2023-48656

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176, which stems from the...

CVE-2023-48659

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...

CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

CVE-2023-48658

The CVE-2023-48658 entry affects MISP prior to 2.4.176. The vulnerability lies in app/Model/AppModel.php, which lacks a checkParam function for allowed characters (alphanumerics, underscore, dash, period, space). This could allow improper input handling leading to a CRITICAL impact (per CVSS 3.1:...

CVE-2023-6063

creationtimestamp| type| source ---|---|--- 2023-11-15 12:43:59+00:00| published-proof-of-concept| https://t.me/itsecnews/3681 2023-11-15 15:20:06+00:00| published-proof-of-concept| https://t.me/truesecator/5087 2023-11-16 09:18:29+00:00| published-proof-of-concept| https://t.me/hackyourmom/5973...

CVE-2023-36427

creationtimestamp| type| source ---|---|--- 2023-11-15 04:52:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5803 2023-11-15 15:55:39+00:00| published-proof-of-concept| Telegram/AOpvdTsjzp7H3NHE-unulMxXJPzXcZMNwS8LLyL1I0LOWQ 2023-11-16 11:01:01+00:00| published-proof-of-concept|...

CVE-2023-36025

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160 2023-11-15 12:34:59+00:00| seen| https://t.me/truesecator/5085 2023-11-17 08:13:29+00:00|...

CVE-2023-36036

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...

CVE-2023-36033

creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...

CVE-2023-26035

creationtimestamp| type| source ---|---|--- 2023-11-10 20:44:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zonemindersnapshots.rb 2023-12-11 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6140 2023-12-12...

CVE-2023-47246

creationtimestamp| type| source ---|---|--- 2023-11-09 14:10:24+00:00| exploited| https://t.me/informationsecuritychannel/50972 2023-11-09 16:08:00+00:00| seen| https://t.me/ctinow/148364 2023-11-09 17:17:30+00:00| exploited| https://t.me/CyberWatchinsider/190 2023-11-09 17:33:49+00:00| seen|...

CVE-2023-41990

creationtimestamp| type| source ---|---|--- 2023-11-03 20:09:36+00:00| seen| https://t.me/itsecnews/3601 2023-12-28 03:17:18+00:00| exploited| https://t.me/alexmakus/5221 2023-12-28 04:41:42+00:00| published-proof-of-concept| https://t.me/kasraonecom/626 2023-12-28 10:08:15+00:00| exploited|...

CVE-2019-17099

creationtimestamp| type| source ---|---|--- 2023-11-03 11:48:27+00:00| seen| MISP/6b1fb020-7c44-40ae-aab0-cdc92ae48dd9...

CVE-2023-46604

creationtimestamp| type| source ---|---|--- 2023-10-27 18:17:07+00:00| seen| https://t.me/cibsecurity/73057 2023-11-01 20:42:27+00:00| seen| MISP/f9c19fe0-d99a-4345-8423-5635b5d8bf1f 2023-11-02 05:37:58+00:00| exploited| https://t.me/thehackernews/4088 2023-11-02 06:01:02+00:00|...

CVE-2023-46748

creationtimestamp| type| source ---|---|--- 2023-10-27 00:18:13+00:00| seen| https://t.me/cibsecurity/73014 2023-10-31 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-01 09:43:20+00:00| exploited| https://t.me/itsecnews/3578 2023-11-01 10:48:35+00:00| exploited|...

CVE-2023-34048

creationtimestamp| type| source ---|---|--- 2023-10-25 12:24:28+00:00| seen| https://t.me/thehackernews/4052 2023-10-25 13:14:53+00:00| seen| https://t.me/KomunitiSiber/980 2023-10-25 13:44:06+00:00| seen| https://t.me/ctinow/145283 2023-10-25 14:11:44+00:00| published-proof-of-concept|...

CVE-2023-5631

creationtimestamp| type| source ---|---|--- 2023-10-18 18:33:48+00:00| seen| https://t.me/cibsecurity/72528 2023-10-25 14:46:34+00:00| seen| https://t.me/ctinow/145309 2023-10-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 23:02:37+00:00| seen|...