iglocska

MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass

MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion

MISP: Authentication failure logging suppressed during Redis unavailability

MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures

MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials

MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

MISP UserSettingsController CSRF Protection Bypass on setTheme, setHomePage, and eventIndexColumnToggle Endpoints

MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection

MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users