← Database

CVE-2022-48329

CRITICAL CVSS: 9.8 Published: 2023-02-20 Modified: 2026-06-22

Description

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php.

Affected Platforms

Misp-Project Misp

Weakness Type

CWE-755, CWE-755

References