CVE-2015-5719

CRITICAL

MISP <2.3.92 - Info Disclosure

Title source: llm
STIX 2.1

Description

app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_confirm
https://www.circl.lu/advisory/CVE-2015-5719/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92740

Scores

CVSS v3 9.8
EPSS 0.0043
EPSS Percentile 62.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
misp-project/malware_information_sharing_platform < 2.3.91
Published Sep 03, 2016
Tracked Since Feb 18, 2026