Jeroen Pinoy

MISP Overmind theme stored XSS via unvalidated homepage setting

MISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files

MISP UiBeta event index reflected XSS in advanced filter popup

MISP AuthKey edit endpoint allows authenticated user email enumeration

MISP event editing allows unauthorized assignment to undisclosed sharing groups

MISP object edit authorization bypass allows unauthorized sharing group assignment

Cerebrate before v1.37 allows mass assignment of record identifiers during object creation

MISP CRUDComponent delete validation bypass via operator precedence error

Cerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated records

MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification