CVE-2020-15412

An issue was discovered in MISP 2.4.128

published June 30, 2020

CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.1th percentile
Published
2020-06-30T13:15Z
EPSS history
Timeline
  • 30 JUN 13:15Z
    An issue was discovered in MISP 2.4.128
    cvelistv5