CVE-2015-5719
CRITICALMalware Information Sharing Platform < 2.3.91 - Unrestricted File Upload in TemplatesController
Title source: llmDescription
app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_confirm
https://www.circl.lu/advisory/CVE-2015-5719/
Issue Tracking, Patch x_refsource_confirm
https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92740
Scores
CVSS v3
9.8
EPSS
0.0227
EPSS Percentile
80.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
misp-project/malware_information_sharing_platform
< 2.3.91
Published
Sep 03, 2016
Tracked Since
Feb 18, 2026