Security Advisory
CVE-2022-48329
9.8
CRITICAL
Vulnerability Description
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php.
Published Date
February 20, 2023
Official Source
NIST NVD Advisory