CVE-2020-29006

CriticalCVSS 9.8

Published: 24/11/2020(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.23%

65th percentile - higher than 65% of all known CVEs

MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.

The lack of ACL checks may lead to unauthorized access to sensitive data, increasing the risk of information leakage within the organization.

It is recommended to update MISP to version 2.4.135 or later to implement proper access controls.

Original NVD description (English source)

MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.