Claude Opus 5 (1M context)

MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent

MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Edit

MISP Collection Element Add Missing Authorization on Referenced Object UUID

MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag Comparison

MISP: State-changing actions accessible via GET request enabling CSRF

MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass

MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion

MISP: Authentication failure logging suppressed during Redis unavailability

MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures

MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials