CVE-2024-29858

CriticalCVSS 9.8

Published: 21/03/2024(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

In MISP before version 2.4.187, the __uploadLogo function in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.

Risk Assessment

The lack of proper validation for uploaded logos may allow malicious files to be introduced, posing a risk of attacks on the application.

Recommendation

It is recommended to update MISP to version 2.4.187 or later and implement additional validation mechanisms for uploaded graphic files.

Original NVD description (English source)

In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.