Vulnerabilities > CVE-2018-8949 - Exposed Dangerous Method or Function vulnerability in Misp-Project Misp
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event (without attribute UUIDs but attribute IDs set) could overwrite an existing attribute.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |