Vulnerability Description
app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Misp-Project | Malware Information Sharing Platform | <= 2.3.91 |
References
- http://www.securityfocus.com/bid/92740
- https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699Issue TrackingPatch
- https://www.circl.lu/advisory/CVE-2015-5719/Third Party Advisory
- http://www.securityfocus.com/bid/92740
- https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699Issue TrackingPatch
- https://www.circl.lu/advisory/CVE-2015-5719/Third Party Advisory
FAQ
What is CVE-2015-5719?
CVE-2015-5719 is a vulnerability with a CVSS score of 9.8 (CRITICAL). app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact an...
How severe is CVE-2015-5719?
CVE-2015-5719 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2015-5719?
Check the references section above for vendor advisories and patch information. Affected products include: Misp-Project Malware Information Sharing Platform.