PT-2026-96767

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp name field by invoking file exists, mime content type, and exif imagetype on the supplied path before verifying that the value was a genuine PHP upload via is uploaded file. An authenticated user holding the perm ad...