| Package | Affected versions | Patched versions |
|---|---|---|
| misp | < 2.4.164 | 2.4.164 |
app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information that only the site admin should have).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free