PT-2026-48999

A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing group id to a sharing group they were not authorized to use. When distribution was set to sharing group distribution, th...