CVE-2018-8949
on github
Published
Severity
CVSS v3:
4.3 MEDIUM
CVSS v2:
5.5 MEDIUM
Description
An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event (without attribute UUIDs but attribute IDs set) could overwrite an existing attribute.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:* | n/a | 2.4.89 | * |