Claude Opus 4.8

MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Information Disclosure via Forged Upload Path

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

MISP Path Traversal via Organization Name in Org-Statistics Logo Check