Jeroen Pinoy

MISP: Improper sharing group authorization check when adding attributes

Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read

MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models

MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields

MISP remote code execution via arbitrary rdkafka configuration path

MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records

MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

MISP template builder exposes non-visible custom galaxies across organisations

MISP Overmind theme stored XSS via unvalidated homepage setting