CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync

published June 30, 2023

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Published
2023-06-30T00:00Z
EPSS history
Timeline
  • 30 JUN 00:00Z
    MISP 2.4.172 mishandles different certificate file extensions in server sync
    cvelistv5