CVE-2015-5719 | BDVDB-2026-77866 Detail

Description#

app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.circl.lu/advisory/CVE-2015-5719/
https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
http://www.securityfocus.com/bid/92740

Exploit#

No public exploit known

History#

Version 12016-09-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.