MISP.

MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings

• MISP
• Information disclosure
• Broken access control

MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution

• MISP
• Information disclosure
• Broken access control

MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels

• MISP
• Cross-site scripting (XSS)

MISP CSS Injection via Remote Tag Colour in Event Preview

• MISP
• Other injection

MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records

• MISP
• CWE-459

MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances

• MISP
• Information disclosure

MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control

• MISP
• Broken access control

MISP Object Sync Drops Objects and Attributes When Description Is Empty

• MISP
• CWE-20

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

• MISP
• Race condition

MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

• MISP
• Authentication bypass

MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes

• MISP
• Broken access control
• CWE-665

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

• MISP
• Broken access control
• CWE-749

MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

• MISP
• Broken access control

MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

• MISP
• Broken access control

MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

• MISP
• Broken access control

MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

• MISP
• Broken access control

MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

• MISP
• Cross-site scripting (XSS)
• CWE-116

MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

• MISP
• Cross-site scripting (XSS)

MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server

• MISP
• Cross-site scripting (XSS)

MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

• MISP
• Cross-site scripting (XSS)

MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions

• MISP
• Broken access control

MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter

• MISP
• Cross-site scripting (XSS)

MISP Reflected XSS in Taxonomy Tag Confirmation Forms

• MISP
• Cross-site scripting (XSS)

MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

• MISP
• Broken access control

MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period

• MISP
• Authentication bypass

MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

• MISP
• Authentication bypass
• Race condition

MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph

• MISP
• Cross-site scripting (XSS)
• CWE-20

MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field

• MISP
• Cross-site scripting (XSS)

MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

• MISP
• Cross-site scripting (XSS)
• CWE-20

MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

• MISP
• Broken access control

MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows

• MISP
• Broken access control
• CWE-20

MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

• MISP
• Broken access control

MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

• MISP
• Other injection
• Insecure deserialization

MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

• MISP
• Broken access control

MISP: Disabled-user check ineffective in pre-authentication TOTP login branch

• MISP
• Broken access control

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

• MISP
• Information disclosure
• CWE-20

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

• MISP
• Path traversal

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

• MISP
• Path traversal

MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

• MISP
• Broken access control

MISP Information Disclosure via Forged Upload Path

• MISP
• Path traversal
• Information disclosure

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

• MISP
• Broken access control

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

• MISP
• Broken access control

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

• MISP
• Cross-site scripting (XSS)

MISP Unauthenticated Blind SSRF via XML Body Processing

• MISP
• Server-side request forgery (SSRF)
• CWE-20

MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

• MISP
• CWE-20

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

• MISP
• Broken access control

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

• MISP
• Path traversal
• Broken access control

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

• MISP
• Cross-site scripting (XSS)

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

• MISP
• Cross-site scripting (XSS)

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

• MISP
• Cross-site scripting (XSS)
• CWE-20

MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

• MISP
• Cross-site request forgery (CSRF)

MISP CSRF vulnerability allows unauthorized attribute modification

• MISP
• Cross-site request forgery (CSRF)

MISP Arbitrary Local File Read and SSRF via MISP Export Upload

• MISP
• Path traversal
• Server-side request forgery (SSRF)

MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References

• MISP
• Broken access control

MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

• MISP
• Broken access control

MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

• MISP
• Unrestricted file upload
• CWE-20

MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

• MISP
• Privilege escalation

MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)

• MISP
• Broken access control
• CWE-20

MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

• MISP
• Broken access control
• CWE-472

MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

• MISP
• Cross-site scripting (XSS)