Peter James

MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking

Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass

MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via GET Request

MISP Dashboard Button Widget Allows Persistent JavaScript URL Injection

MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

Cross-Site Request Forgery via Attacker-Controlled REST Detection in MISP