CVE-2015-5721

Опубликовано: 03 сент. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp.

Ссылки

http://www.securityfocus.com/bid/92739
https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56
Issue Tracking
Patch
https://www.circl.lu/advisory/CVE-2015-5721/
Third Party Advisory
http://www.securityfocus.com/bid/92739
https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56
Issue Tracking
Patch
https://www.circl.lu/advisory/CVE-2015-5721/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:misp-project:malware_information_sharing_platform:*:*:*:*:*:*:*:*

Версия до 2.3.89 (включая)

EPSS

Процентиль: 75%

0.00858

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-xf83-mpmg-c458