Claude Opus 4.8

MISP Information Disclosure via Forged Upload Path

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends

Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name

MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection