Andras Iklody

MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records

MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

MISP automation endpoints may be exposed to CSRF when Sec-Fetch-Site protection is disabled by default

MISP template builder exposes non-visible custom galaxies across organisations

MISP Overmind theme stored XSS via unvalidated homepage setting

MISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files

MISP UiBeta event index reflected XSS in advanced filter popup

MISP AuthKey edit endpoint allows authenticated user email enumeration

MISP event editing allows unauthorized assignment to undisclosed sharing groups

MISP object edit authorization bypass allows unauthorized sharing group assignment