CVE-2024-57969

MediumCVSS 4.3

Published: 14/02/2025(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

In MISP before version 2.4.198, the app/Model/Attribute.php file ignores ACL rules during a GUI attribute search.

Ignoring ACL rules may lead to unauthorized access to data, posing a serious security risk to the organization.

It is recommended to update MISP to version 2.4.198 or later to address this vulnerability.

Original NVD description (English source)

app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.