CVE-2020-8894

MediumCVSS 6.5

Published: 12/02/2020(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.35%

68th percentile - higher than 68% of all known CVEs

Summary

An issue was discovered in MISP before version 2.4.121 where ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.

Risk Assessment

Improper ACL management may lead to unauthorized access to discussion threads, jeopardizing the confidentiality of information within the organization.

Recommendation

It is recommended to update MISP to version 2.4.121 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.