CVE-2021-39302

Published August 19th, 2021

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

GitHub

6.38K