CVE-2025-67906

Mô tả

Tham khảo

• MISP/MISP commit 1f39deb · Patch
• MISP/MISP · Release Notes
• franckferman/CVE-2025-67906 · Third Party Advisory
• franckferman/GCVE-1-2025-0030 · Third Party Advisory
• vulnerability.circl.lu/vuln/gcve-1-2025-0031 · Third Party Advisory

Lỗ hổng khác của misp

• CVE-2026-86452CAO 7.5Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bound…
• CVE-2026-86451TRUNG BÌNH 4.3Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data(…
• CVE-2026-86441TRUNG BÌNH 4.3Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Severa…
• CVE-2026-86440TRUNG BÌNH 5.4Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stor…
• CVE-2026-86419NGHIÊM TRỌNG 9.1Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery fu…