CVE-2020-15412

Published June 30th, 2020

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form.

MISP/MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

GitHub

6.38K