CVE-2019-19379

MediumCVSS 5.3

Published: 28/11/2019(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.10%

61th percentile - higher than 61% of all known CVEs

In MISP 2.4.118 in app/Controller/TagsController.php, users can bypass intended restrictions on tagging data.

Bypassing these restrictions may lead to unauthorized access to data and improper tagging, jeopardizing the integrity of the system.

It is recommended to update to the latest version of MISP to mitigate this vulnerability and implement additional access controls.

Original NVD description (English source)

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.