Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.1%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
Products affected by CVE-2019-12868
  • Misp » Misp » Version: 2.4.109
    cpe:2.3:a:misp:misp:2.4.109


Products
Pricing
Contact Us

Shodan ® - All rights reserved