CVE-2020-28043

Published November 2nd, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

GitHub

6.38K