2.3.73

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-24	CVE-2020-29006	Missing Authorization vulnerability in Misp MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php. network low complexity misp CWE-862	7.5
2020-11-02	CVE-2020-28043	Server-Side Request Forgery (SSRF) vulnerability in Misp MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. network low complexity misp CWE-918	5.0
2020-09-18	CVE-2020-25766	Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.132. network low complexity misp	5.0
2020-07-14	CVE-2020-15711	Cross-Site Request Forgery (CSRF) vulnerability in Misp In MISP before 2.4.129, setting a favourite homepage was not CSRF protected. network misp CWE-352	6.8
2020-05-18	CVE-2020-13153	Cross-site Scripting vulnerability in Misp app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view. network misp CWE-79	4.3
2020-04-02	CVE-2020-11458	Information Exposure vulnerability in Misp app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. network low complexity misp CWE-200	4.0
2020-02-12	CVE-2020-8894	Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network low complexity misp	6.5
2020-02-12	CVE-2020-8893	Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network low complexity misp	7.5
2020-02-12	CVE-2020-8892	Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network misp	6.8
2020-02-12	CVE-2020-8891	Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network misp	4.3