CVE-2022-48328

CriticalCVSS 9.8

Published: 20/02/2023(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.30%

67th percentile - higher than 67% of all known CVEs

The app/Controller/Component/IndexFilterComponent.php in MISP before version 2.4.167 mishandles ordered_url_params and additional_delimiters.

This flaw may lead to improper processing of URL data, potentially resulting in security vulnerabilities in the application.

It is recommended to update MISP to version 2.4.167 or later to mitigate this vulnerability.

Original NVD description (English source)

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.