Andras Iklody

MISP organization administrators can target site administrator accounts for password reset

MISP improper authorization allows organization administrators to modify site administrator user settings

Cerebrate before v1.37 allows mass assignment of record identifiers during object creation

MISP CRUDComponent delete validation bypass via operator precedence error

Cerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated records

Cerebrate self-registration password hash exposure via inbox and audit log views

MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification

MISP User-controlled order parameter in correlations over-correlation endpoint

MISP Dashboard widget field selection may expose restricted user and organisation data

Unauthorized exposure of private galaxies in MISP event template creation