iglocska

MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References

MISP Arbitrary Local File Read and SSRF via MISP Export Upload

MISP CSRF vulnerability allows unauthorized attribute modification

Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name

MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled

MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent

MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Edit

MISP Collection Element Add Missing Authorization on Referenced Object UUID

MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag Comparison

MISP: State-changing actions accessible via GET request enabling CSRF