CVE-2015-5719

Опубликовано: 03 сент. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.

Ссылки

http://www.securityfocus.com/bid/92740
https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
Issue Tracking
Patch
https://www.circl.lu/advisory/CVE-2015-5719/
Third Party Advisory
http://www.securityfocus.com/bid/92740
https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
Issue Tracking
Patch
https://www.circl.lu/advisory/CVE-2015-5719/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*

Версия до 2.3.91 (включая)

EPSS

Процентиль: 82%

0.02287

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2015-5719

CVSS3: 9.8

debian

около 10 лет назад

app/Controller/TemplatesController.php in Malware Information Sharing ...

GHSA-9vqr-hvpr-j7r6

CVSS3: 9.8

github

больше 4 лет назад

EPSS

Процентиль: 82%

0.02287

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo