Advisories · Technology
MISP sachertortephp.
Every CVE that names MISP sachertortephp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
- MISP sachertortephp
- Cross-site scripting (XSS)
- Other injection
- CVSS 5.1 Medium
MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled
- misp sachertortephp
- Server-side request forgery (SSRF)
- CWE-670