CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

PT-2023-25898 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.172 Description: The issue arises from the improper sanitization of the title for layout in Correlations, CorrelationExclusions, and Layouts. This could potentially lead to security issues, although specific details...