Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities
CVE-2023-48657
Published:
Nov 17, 2023
| Modified:
Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-48657
CWE
https://cwe.mitre.org/data/definitions/.html
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
Affected Software
Name
Vendor
Start Version
End Version
Malware_information_sharing_platform
Misp-project
*
2.4.176 (excluding)
References
https://github.com/MISP/MISP/commit/08bd23281ead288de678de666ef43ed6de1899fc
https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176
https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/
https://github.com/MISP/MISP/commit/08bd23281ead288de678de666ef43ed6de1899fc
https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176
https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/
Aqua Container Security