Misp: >> Misp >> 2.4.109 Security Vulnerabilities
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.
CVSS Score
7.2
EPSS Score
0.021
Published
2019-06-18
Page 5