In app/Model/MispObject.php in MISP 2.4.141, an incorrect...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Apr 23, 2021
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 29, 2023
In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused.
References