agentprime: misp

agentprime: mispEvery new CVE for misp.https://agentprime.io/CVE-2026-112192: MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settingshttps://agentprime.io/advisories/CVE-2026-112192/https://agentprime.io/advisories/CVE-2026-112192/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:28:08 GMTCVECVE-2026-112188: MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolutionhttps://agentprime.io/advisories/CVE-2026-112188/https://agentprime.io/advisories/CVE-2026-112188/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:22:37 GMTCVECVE-2026-112184: MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labelshttps://agentprime.io/advisories/CVE-2026-112184/https://agentprime.io/advisories/CVE-2026-112184/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:19:45 GMTCVECVE-2026-112183: MISP CSS Injection via Remote Tag Colour in Event Previewhttps://agentprime.io/advisories/CVE-2026-112183/https://agentprime.io/advisories/CVE-2026-112183/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:15:47 GMTCVECVE-2026-112180: MISP Incomplete Event Deletion Leaves Orphaned Sensitive Recordshttps://agentprime.io/advisories/CVE-2026-112180/https://agentprime.io/advisories/CVE-2026-112180/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:00:13 GMTCVECVE-2026-112179: MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instanceshttps://agentprime.io/advisories/CVE-2026-112179/https://agentprime.io/advisories/CVE-2026-112179/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 08:53:57 GMTCVECVE-2026-112178: MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Controlhttps://agentprime.io/advisories/CVE-2026-112178/https://agentprime.io/advisories/CVE-2026-112178/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 08:50:52 GMTCVECVE-2026-107278: MISP Object Sync Drops Objects and Attributes When Description Is Emptyhttps://agentprime.io/advisories/CVE-2026-107278/https://agentprime.io/advisories/CVE-2026-107278/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 15:42:42 GMTCVECVE-2026-107276: MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requestshttps://agentprime.io/advisories/CVE-2026-107276/https://agentprime.io/advisories/CVE-2026-107276/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 15:36:49 GMTCVECVE-2026-107180: MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instanceshttps://agentprime.io/advisories/CVE-2026-107180/https://agentprime.io/advisories/CVE-2026-107180/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:49:40 GMTCVECVE-2026-107175: MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changeshttps://agentprime.io/advisories/CVE-2026-107175/https://agentprime.io/advisories/CVE-2026-107175/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:38:44 GMTCVECVE-2026-106513: MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Changehttps://agentprime.io/advisories/CVE-2026-106513/https://agentprime.io/advisories/CVE-2026-106513/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:58:53 GMTCVECVE-2026-104914: MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated Viewhttps://agentprime.io/advisories/CVE-2026-104914/https://agentprime.io/advisories/CVE-2026-104914/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 16:09:40 GMTCVECVE-2026-104912: MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Datahttps://agentprime.io/advisories/CVE-2026-104912/https://agentprime.io/advisories/CVE-2026-104912/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 16:04:50 GMTCVECVE-2026-104910: MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorizationhttps://agentprime.io/advisories/CVE-2026-104910/https://agentprime.io/advisories/CVE-2026-104910/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 16:01:32 GMTCVECVE-2026-104908: MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagginghttps://agentprime.io/advisories/CVE-2026-104908/https://agentprime.io/advisories/CVE-2026-104908/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 15:56:13 GMTCVECVE-2026-104907: MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handlerhttps://agentprime.io/advisories/CVE-2026-104907/https://agentprime.io/advisories/CVE-2026-104907/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 15:51:34 GMTCVECVE-2026-104906: MISP TAXII Object Viewer Stored XSS via Unescaped JSON Outputhttps://agentprime.io/advisories/CVE-2026-104906/https://agentprime.io/advisories/CVE-2026-104906/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 15:49:32 GMTCVECVE-2026-104901: MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Serverhttps://agentprime.io/advisories/CVE-2026-104901/https://agentprime.io/advisories/CVE-2026-104901/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 15:21:53 GMTCVECVE-2026-104900: MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Indexhttps://agentprime.io/advisories/CVE-2026-104900/https://agentprime.io/advisories/CVE-2026-104900/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 15:16:27 GMTCVECVE-2026-103858: MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussionshttps://agentprime.io/advisories/CVE-2026-103858/https://agentprime.io/advisories/CVE-2026-103858/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 11:31:32 GMTCVECVE-2026-103664: MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameterhttps://agentprime.io/advisories/CVE-2026-103664/https://agentprime.io/advisories/CVE-2026-103664/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 08:55:51 GMTCVECVE-2026-103662: MISP Reflected XSS in Taxonomy Tag Confirmation Formshttps://agentprime.io/advisories/CVE-2026-103662/https://agentprime.io/advisories/CVE-2026-103662/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 08:48:38 GMTCVECVE-2026-103659: MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributeshttps://agentprime.io/advisories/CVE-2026-103659/https://agentprime.io/advisories/CVE-2026-103659/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 08:33:05 GMTCVECVE-2026-103655: MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Periodhttps://agentprime.io/advisories/CVE-2026-103655/https://agentprime.io/advisories/CVE-2026-103655/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 08:08:55 GMTCVEcriticalCVE-2026-103651: MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-103651/https://agentprime.io/advisories/CVE-2026-103651/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 07:34:02 GMTCVECVE-2026-103389: MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graphhttps://agentprime.io/advisories/CVE-2026-103389/https://agentprime.io/advisories/CVE-2026-103389/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 14:25:59 GMTCVECVE-2026-103388: MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Fieldhttps://agentprime.io/advisories/CVE-2026-103388/https://agentprime.io/advisories/CVE-2026-103388/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 14:22:36 GMTCVECVE-2026-103321: MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Imagehttps://agentprime.io/advisories/CVE-2026-103321/https://agentprime.io/advisories/CVE-2026-103321/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 12:19:01 GMTCVECVE-2026-103239: MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injectionhttps://agentprime.io/advisories/CVE-2026-103239/https://agentprime.io/advisories/CVE-2026-103239/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 10:16:18 GMTCVECVE-2026-103237: MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rowshttps://agentprime.io/advisories/CVE-2026-103237/https://agentprime.io/advisories/CVE-2026-103237/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 09:56:35 GMTCVECVE-2026-103235: MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Eventshttps://agentprime.io/advisories/CVE-2026-103235/https://agentprime.io/advisories/CVE-2026-103235/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 09:09:36 GMTCVECVE-2026-95806: MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem pathshttps://agentprime.io/advisories/CVE-2026-95806/https://agentprime.io/advisories/CVE-2026-95806/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 15:09:09 GMTCVECVE-2026-95805: MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restrictionhttps://agentprime.io/advisories/CVE-2026-95805/https://agentprime.io/advisories/CVE-2026-95805/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:59:22 GMTCVECVE-2026-95754: MISP: Disabled-user check ineffective in pre-authentication TOTP login branchhttps://agentprime.io/advisories/CVE-2026-95754/https://agentprime.io/advisories/CVE-2026-95754/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:53:56 GMTCVECVE-2026-95703: MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_namehttps://agentprime.io/advisories/CVE-2026-95703/https://agentprime.io/advisories/CVE-2026-95703/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:49:42 GMTCVECVE-2026-95701: MISP Path Traversal via Organization Name in Org-Statistics Logo Checkhttps://agentprime.io/advisories/CVE-2026-95701/https://agentprime.io/advisories/CVE-2026-95701/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:44:21 GMTCVECVE-2026-95698: MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Namehttps://agentprime.io/advisories/CVE-2026-95698/https://agentprime.io/advisories/CVE-2026-95698/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:36:35 GMTCVECVE-2026-95697: MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadatahttps://agentprime.io/advisories/CVE-2026-95697/https://agentprime.io/advisories/CVE-2026-95697/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:31:25 GMTCVECVE-2026-95693: MISP Information Disclosure via Forged Upload Pathhttps://agentprime.io/advisories/CVE-2026-95693/https://agentprime.io/advisories/CVE-2026-95693/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:22:28 GMTCVECVE-2026-95685: MISP Missing Authorization on replaceSuggestionInReport Event Report Actionhttps://agentprime.io/advisories/CVE-2026-95685/https://agentprime.io/advisories/CVE-2026-95685/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:13:26 GMTCVECVE-2026-95683: MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACLhttps://agentprime.io/advisories/CVE-2026-95683/https://agentprime.io/advisories/CVE-2026-95683/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 14:06:59 GMTCVECVE-2026-95682: MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email Viewhttps://agentprime.io/advisories/CVE-2026-95682/https://agentprime.io/advisories/CVE-2026-95682/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:56:51 GMTCVECVE-2026-95679: MISP Unauthenticated Blind SSRF via XML Body Processinghttps://agentprime.io/advisories/CVE-2026-95679/https://agentprime.io/advisories/CVE-2026-95679/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:50:48 GMTCVECVE-2026-95674: MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validationhttps://agentprime.io/advisories/CVE-2026-95674/https://agentprime.io/advisories/CVE-2026-95674/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:44:33 GMTCVECVE-2026-95671: MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/addhttps://agentprime.io/advisories/CVE-2026-95671/https://agentprime.io/advisories/CVE-2026-95671/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:20:25 GMTCVECVE-2026-95667: MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentialshttps://agentprime.io/advisories/CVE-2026-95667/https://agentprime.io/advisories/CVE-2026-95667/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:11:44 GMTCVECVE-2026-95665: MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSONhttps://agentprime.io/advisories/CVE-2026-95665/https://agentprime.io/advisories/CVE-2026-95665/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 13:01:45 GMTCVECVE-2026-95661: MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type Listhttps://agentprime.io/advisories/CVE-2026-95661/https://agentprime.io/advisories/CVE-2026-95661/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 12:54:46 GMTCVECVE-2026-95659: MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Threadhttps://agentprime.io/advisories/CVE-2026-95659/https://agentprime.io/advisories/CVE-2026-95659/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 12:40:38 GMTCVE