PT-2022-18323
CVE-2022-27243
·
تاريخ النشر
2022-03-18
·
تاريخ التحديث
2022-03-25
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MISP versions prior to 2.4.156
Description
An issue was discovered that allows Local File Inclusion via the custom terms file setting in the
app/View/Users/terms.ctp file.Recommendations
For versions prior to 2.4.156, update to version 2.4.156 or later to resolve the issue. As a temporary workaround, consider restricting access to the
terms.ctp file until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾