CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-01-20

Last modified

2025-04-03

Weaknesses

CWE-284

Affected products

• Misp (Misp-project)

References

• https://github.com/MISP/MISP/commit/93bf15d3bd703a32ebfe86cb6c1c9b735cf23e30