In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.
References
Link | Resource |
---|---|
https://github.com/MISP/MISP/commit/3f3b9a574f349182a545636e12efa39267e9db04 | Patch |
Configurations
History
04 Sep 2024, 16:45
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
First Time |
Misp
Misp misp |
|
References | () https://github.com/MISP/MISP/commit/3f3b9a574f349182a545636e12efa39267e9db04 - Patch | |
CPE | cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:* | |
CWE | CWE-863 |
03 Sep 2024, 15:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | CWE-284 |
03 Sep 2024, 12:59
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
01 Sep 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-01 22:15
Updated : 2024-09-04 16:45
NVD link : CVE-2024-45509
Mitre link : CVE-2024-45509
CVE.ORG link : CVE-2024-45509
JSON object : View
Products Affected
misp
- misp