CVE Catalog
CVE-2024-29859
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.82%
52th percentile - higher than 52% of all known CVEs
Summary
In MISP before version 2.4.187, the add_misp_export function in app/Controller/EventsController.php does not properly check for a valid file upload.
Risk Assessment
The lack of proper validation for uploaded files may lead to the introduction of malicious software or unauthorized access to the system.
Recommendation
It is recommended to update MISP to version 2.4.187 or later to ensure proper validation of uploaded files.
Original NVD description (English source)
In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.