CVE-2022-27245

CVE-2022-27245 affects MISP up to version 2.4.156. The issue is that app/Model/Server.php does not restrict generateServerSettings to the CLI, enabling potential SSRF from an attacker's input. Documented impact: SSRF with network scope and partial confidentiality/integrity/availability implicatio...

CVE-2022-27246

An issue was discovered in MISP before 2.4.156. An SVG org logo which may contain JavaScript is not forbidden by default...

CVE-2022-27246

CVE-2022-27246 : The connected records confirm an issue in MISP prior to 2.4.156 where an SVG organization logo is not forbidden by default. This may allow embedded JavaScript in the SVG to execute, as described in the initial entry. The documents do not provide explicit impact details beyond the...

CVE-2022-27246

An issue was discovered in MISP before 2.4.156. An SVG org logo which may contain JavaScript is not forbidden by default...

MISP 代码问题漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.156, which stems from...

Vulnerabilities fixed in MISP

Vulnerabilities have been fixed in MISP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Remote code execution User Rights The developers of MISP have released a new versi...

CVE-2022-26504

creationtimestamp| type| source ---|---|--- 2022-03-17 23:21:51+00:00| seen| https://t.me/cibsecurity/39171 2023-09-20 10:36:36+00:00| seen| MISP/cec219ff-8f6d-45c9-bdbb-b4fb8c9c0f2b 2026-07-23 21:15:03+00:00| seen| MISP/cec219ff-8f6d-45c9-bdbb-b4fb8c9c0f2b 2026-07-24 00:15:03+00:00| seen|...

CVE-2022-26210

creationtimestamp| type| source ---|---|--- 2022-03-16 01:20:01+00:00| seen| https://t.me/cibsecurity/38990 2022-04-02 18:51:58+00:00| seen| https://t.me/NeKaspersky/2069 2022-04-04 16:37:00+00:00| seen| https://t.me/truesecator/2804 2025-04-23 09:42:57+00:00| seen|...

CVE-2022-26501

creationtimestamp| type| source ---|---|--- 2022-03-14 13:38:49+00:00| seen| https://t.me/ptswarm/115 2022-03-15 17:19:30+00:00| seen| https://t.me/cKure/9039 2022-03-16 14:51:00+00:00| exploited| https://t.me/itsecnews/315 2022-03-17 23:21:52+00:00| seen| https://t.me/cibsecurity/39172 2023-06-1...

CVE-2022-26500

creationtimestamp| type| source ---|---|--- 2022-03-14 13:38:49+00:00| seen| https://t.me/ptswarm/115 2022-03-15 17:19:30+00:00| seen| https://t.me/cKure/9039 2022-03-16 14:51:00+00:00| exploited| https://t.me/itsecnews/315 2022-03-17 23:21:50+00:00| seen| https://t.me/cibsecurity/39170 2023-06-1...

CVE-2022-23940

creationtimestamp| type| source ---|---|--- 2022-03-11 06:40:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1646 2024-08-01 12:09:53+00:00| seen| MISP/4c20a67f-a4c2-4cca-86c4-710293720e5d...

CVE-2022-0001

creationtimestamp| type| source ---|---|--- 2022-03-10 11:08:32+00:00| seen| https://t.me/sysodmins/14260 2022-03-11 07:04:29+00:00| published-proof-of-concept| https://t.me/SecLabNews/11732 2022-03-11 16:40:00+00:00| published-proof-of-concept| https://t.me/truesecator/2723 2022-06-16...

CVE-2022-24734

creationtimestamp| type| source ---|---|--- 2022-03-10 00:12:09+00:00| seen| https://t.me/cibsecurity/38631 2022-05-11 20:08:56+00:00| published-proof-of-concept| Telegram/qeIlHXwk6VKV4UhXVPLQLbzvqENjIaoZ6ZELYqE5ad4Jd8Y 2022-05-11 21:15:25+00:00| published-proof-of-concept| https://t.me/MrVGunz/1...

CVE-2022-26143

creationtimestamp| type| source ---|---|--- 2022-03-09 18:35:18+00:00| exploited| https://t.me/NeKaspersky/1961 2022-03-10 11:58:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5572 2022-03-24 15:00:40+00:00| seen| Telegram/avpuSCeroSRuI6Q4LdhzIJlOMgwJSnzyUBpCKjrlyUT8...

CVE-2022-23277

creationtimestamp| type| source ---|---|--- 2022-03-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=752 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6298 2022-08-19 16:31:57+00:00| seen|...

CVE-2022-24716

creationtimestamp| type| source ---|---|--- 2022-03-08 22:40:55+00:00| seen| https://t.me/cibsecurity/38556 2023-03-21 09:01:04+00:00| published-proof-of-concept| https://t.me/dilagrafie/2612 2023-03-21 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7967...

CVE-2022-24990

creationtimestamp| type| source ---|---|--- 2022-03-08 01:43:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1615 2022-03-08 13:08:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5560 2022-03-20 05:23:50+00:00| published-proof-of-concept|...

CVE-2022-0441

creationtimestamp| type| source ---|---|--- 2022-03-07 17:19:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wpmasterstudyprivesc.rb 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6293 2022-11-1...

CVE-2022-0847

creationtimestamp| type| source ---|---|--- 2022-03-07 14:34:43+00:00| seen| https://t.me/GithubRedTeam/1602 2022-03-07 15:56:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1603 2022-03-07 18:39:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1606 2022-03-07...

CVE-2022-26486

creationtimestamp| type| source ---|---|--- 2022-03-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=749 2022-03-07 05:42:50+00:00| exploited| https://t.me/thehackernews/1952 2022-03-07 06:12:15+00:00| seen| https://t.me/cKure/8957 2022-11-17 10:42:44+00:00| exploited|...