MISP Server-Side Request Forgery Vulnerability

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A server-side request forgery vulnerability exists in the REST client in MISP 2.4.133 and earlier versions. An...

PT-2020-16906

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.134 Description The issue allows for Server-Side Request Forgery SSRF in the REST client. This is achieved via the use full path parameter with an arbitrary URL. Recommendations For versions prior to 2.4.134, update ...