CVE-2023-48655

CriticalCVSS 9.8

Published: 17/11/2023(UTC)Updated: 23/06/2026(UTC)Translated: 24/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

55th percentile - higher than 55% of all known CVEs

An issue was discovered in MISP before version 2.4.176, where the IndexFilterComponent.php does not properly filter out query parameters.

Improper filtering of query parameters may lead to unauthorized access to data or execution of unwanted operations within the application.

It is recommended to update MISP to version 2.4.176 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.