CVE-2022-29528

Description

References

• MISP/MISP commit 0108f1b · Patch
• MISP/MISP commit 93821c0 · Patch
• MISP/MISP · Release Notes
• zigrin.com/advisories/misp-phar-deserialization · Third Party Advisory
• zigrin.com/cakephp-application-cybersecurity-research-exploring-the-phar-deserialization-php-vulnerability-a-white-box-testing-example · Exploit

misp 的其他漏洞

• CVE-2026-86452高危 7.5Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bound…
• CVE-2026-86451中危 4.3Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data(…
• CVE-2026-86441中危 4.3Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Severa…
• CVE-2026-86440中危 5.4Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stor…
• CVE-2026-86419严重 9.1Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery fu…