Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-29528
CRITICAL
CVSS:
9.8
Published: 2022-04-20
Modified: 2026-06-22
Description
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.
Affected Platforms
Misp-Project Misp
Weakness Type
CWE-502
References
https://github.com/MISP/MISP/commit/0108f1bde2117ac5c1e28d124128f60c8bb09a8e
https://github.com/MISP/MISP/commit/93821c0de6a7dd32262ce62212773f43136ca66e
https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158
https://zigrin.com/advisories/misp-phar-deserialization/
https://zigrin.com/cakephp-application-cybersecurity-research-exploring-the-phar…
https://github.com/MISP/MISP/commit/0108f1bde2117ac5c1e28d124128f60c8bb09a8e