An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.

misp

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.

misp

app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.

misp

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.

misp-project

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.

misp-project

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.

misp-project

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.

misp-project

An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.

misp-project

An issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected XSS issue exists via the id parameter upon a dashboard edit.

misp

MISP 2.4.174 allows XSS in app/View/Events/index.ctp.

misp

In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.

misp-project

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.

misp-project

Information disclosure in Kernel due to indirect branch misprediction.

qualcomm

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.

linux

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.

misp-project

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.

misp-project

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.

misp-project

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php.

misp

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.

misp

app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field.

misp-project

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.

misp-project