CVE-2021-27904

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139

published March 2, 2021

CVSS
—
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Published
2021-03-02T06:58Z
EPSS history
Timeline
  • 02 MAR 06:58Z
    An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139
    cvelistv5