| Package | Affected versions | Patched versions |
|---|---|---|
| misp | < 2.4.198 | 2.4.198 |
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free