CVE-2021-31780
23.04.2021, 20:15
In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused.Enginsight
| Vendor | Product | Version |
|---|---|---|
| misp | misp | 2.4.141 |
𝑥
= Vulnerable software versions