CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled…

published June 17, 2019

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06199 · 93.5th percentile
Published
2019-06-17T00:00Z
EPSS history
Timeline
  • 17 JUN 00:00Z
    app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled…
    cvelistv5