Vulnerabilities > Misp > Misp > 2.4.46
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-11-24 | CVE-2020-29006 | Missing Authorization vulnerability in Misp MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php. | 7.5 |
2020-11-02 | CVE-2020-28043 | Server-Side Request Forgery (SSRF) vulnerability in Misp MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. | 5.0 |
2020-09-18 | CVE-2020-25766 | Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.132. | 5.0 |
2020-07-14 | CVE-2020-15711 | Cross-Site Request Forgery (CSRF) vulnerability in Misp In MISP before 2.4.129, setting a favourite homepage was not CSRF protected. | 6.8 |
2020-05-18 | CVE-2020-13153 | Cross-site Scripting vulnerability in Misp app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view. | 4.3 |
2020-04-02 | CVE-2020-11458 | Information Exposure vulnerability in Misp app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. | 4.0 |
2020-02-12 | CVE-2020-8894 | Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. | 6.5 |
2020-02-12 | CVE-2020-8893 | Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. | 7.5 |
2020-02-12 | CVE-2020-8892 | Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network misp | 6.8 |
2020-02-12 | CVE-2020-8891 | Unspecified vulnerability in Misp An issue was discovered in MISP before 2.4.121. network misp | 4.3 |