Описание
An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.156 (исключая)
cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00332
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 8.8
github
почти 4 года назад
An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.
EPSS
Процентиль: 56%
0.00332
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-918