12 matches found
CVE-2026-95703
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
CVE-2026-95693
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
CVE-2026-95703
MISP is affected in the OrganisationsController::__uploadLogo method, which processes a caller-supplied tmp_name value using filesystem probes (file_exists, MIME type detection, EXIF reading) before verifying the value via is_uploaded_file. An authenticated site-admin user can supply an arbitrary...
CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
EUVD-2026-84497
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
EUVD-2026-84492
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2026-95693
MISP 's EventReport::uploadPicture method processes a caller-supplied tmp_name field by calling file_exists(), mime_content_type(), and exif_imagetype() on the path before validating it with is_uploaded_file(). An authenticated user with the perm_add permission can supply an arbitrary filesystem ...
CVE-2026-95693 MISP Information Disclosure via Forged Upload Path
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2025-66384: Incorrect Provision of Specified Functionality
app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...
