CVE-2021-39302

CRITICAL CVSS: 9.8 Published: 2021-08-19 Modified: 2026-06-22

Description

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.

Affected Platforms

Misp-Project Misp

Weakness Type

CWE-89

References