Jeroen Pinoy

MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)

MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP CSRF vulnerability allows unauthorized attribute modification

MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References

MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name