CVE-2023-48659

CriticalCVSS 9.8

Published: 17/11/2023(UTC)Updated: 23/06/2026(UTC)Translated: 24/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

55th percentile - higher than 55% of all known CVEs

An issue was discovered in MISP before version 2.4.176 related to mishandling parameter parsing in app/Controller/AppController.php.

Mishandling of parameters may lead to unauthorized access or data manipulation, posing a threat to the integrity of the system.

It is recommended to update MISP to version 2.4.176 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.