CVE-2023-50918

CriticalCVSS 9.8

Published: 15/12/2023(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

51th percentile - higher than 51% of all known CVEs

In app/Controller/AuditLogsController.php in MISP before version 2.4.182, ACLs for audit logs are mishandled.

Improper ACL management may lead to unauthorized access to sensitive audit logs, posing a risk of data exposure.

It is recommended to update MISP to version 2.4.182 or later to address this vulnerability.

Original NVD description (English source)

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.