iglocska

MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References

MISP Arbitrary Local File Read and SSRF via MISP Export Upload

MISP CSRF vulnerability allows unauthorized attribute modification

Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name

MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled

MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent

MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Edit