Design/Logic Flaw

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...