CVE-2023-48658

CriticalCVSS 9.8

Published: 17/11/2023(UTC)Updated: 23/06/2026(UTC)Translated: 24/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

55th percentile - higher than 55% of all known CVEs

Summary

An issue was discovered in MISP before version 2.4.176 related to the lack of a checkParam function in app/Model/AppModel.php, which should validate alphanumerics, underscores, dashes, periods, and spaces.

Risk Assessment

The lack of proper input validation may allow the introduction of malicious data, increasing the risk of attacks on the application.

Recommendation

It is recommended to update MISP to version 2.4.176 or later to ensure proper input validation.

Original NVD description (English source)

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.