Published threat advisories for February 20, 2023

A critical vulnerability exists in MISP, a threat intelligence sharing platform, allowing unauthenticated users to manipulate the 'order' parameter. This could lead to unauthorized access and modification of sensitive data if the affected component is reachable. The platform's network accessibility and lack of authenti

NVD published: February 20, 2023

A vulnerability in the MISP platform's component for handling URL parameters could allow an attacker to access, modify, or compromise sensitive data. Because this platform is used for sharing threat intelligence, confirming its presence and accessibility in your environment is important.

NVD published: February 20, 2023