CVE Catalog

CVE-2023-48656

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.91%

55th percentile - higher than 55% of all known CVEs

Summary

An issue was discovered in MISP before version 2.4.176 related to mishandling order clauses in app/Model/AppModel.php.

Risk Assessment

Mishandling of order clauses may lead to unexpected results in the application, potentially affecting data integrity.

Recommendation

It is recommended to upgrade MISP to version 2.4.176 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS