CVE Catalog
CVE-2022-29528
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk2.08%
79th percentile - higher than 79% of all known CVEs
Summary
An issue was discovered in MISP before version 2.4.158 related to PHAR deserialization.
Risk Assessment
PHAR deserialization may lead to the execution of malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade MISP to version 2.4.158 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.