CVE Catalog
CVE-2015-5721
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk2.61%
83th percentile - higher than 83% of all known CVEs
Summary
Malware Information Sharing Platform (MISP) before 2.3.90 is vulnerable to PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp.
Risk Assessment
Remote attackers can exploit this vulnerability to gain control over the application, potentially leading to data exposure or unauthorized code execution.
Recommendation
It is recommended to upgrade MISP to version 2.3.90 or later to mitigate this vulnerability.
Original NVD description (English source)
Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp.