exploitDog

CVE-2020-15711

Опубликовано: 14 июл. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

Ссылки

https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8
Patch
Third Party Advisory
https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129
Patch
Third Party Advisory
https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8
Patch
Third Party Advisory
https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*

Версия до 2.4.129 (исключая)

EPSS

Процентиль: 35%

0.00141

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-hp3j-wm2j-68h5

github

больше 3 лет назад

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

EPSS

Процентиль: 35%

0.00141

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352