CVE-2020-25766

HIGH 7.5CVE-2020-25766 · Published 18/09/2020 · updated 22/06/2026

In short

CVE-2020-25766 is a HIGH (CVSS 7.5) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.
Fix: update to 2.4.132 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.132`	`2.4.132`

Description

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page.

References

MISP/MISP commit 1649631 · Patch
MISP/MISP · Patch

More vulnerabilities in misp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free