CVE-2022-48328

CRITICAL 9.8CVE-2022-48328 · Published 20/02/2023 · updated 22/06/2026

In short

CVE-2022-48328 is a CRITICAL (CVSS 9.8) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
Fix: update to 2.4.167 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.167`	`2.4.167`

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.4.167

2.4.167

More vulnerabilities in misp

See all →