Jeroen Pinoy

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP Information Disclosure via Forged Upload Path

MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP Path Traversal via Organization Name in Org-Statistics Logo Check