https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:19:00 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-107276 <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-107276 https://vulnerability.circl.lu/vuln/gcve-1-2026-20315 <p><strong>Affected:</strong> MISP</p> <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> <p><strong>Affected:</strong> MISP</p> <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> https://vulnerability.circl.lu/vuln/gcve-1-2026-20315 https://vulnerability.circl.lu/vuln/ghsa-fjjq-85mx-vg3v <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> <p>MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store, validated, and then deleted in separate non-atomic steps, allowing a second in-flight request to read the same value before the first request&#39;s deletion takes effect.</p> <p>Preconditions:</p> <p>- The target MISP instance has email OTP login enabled.</p> <p>- The attacker possesses a valid, unexpired OTP (e.g., via email interception or social engineering).</p> <p>- The attacker can issue two HTTP POST requests in close temporal proximity.</p> <p>Impact:</p> <p>- The one-time-use guarantee of the OTP is violated; a single code can yield two authenticated sessions.</p> <p>- This weakens the authentication control and may facilitate unauthorized access if the OTP is shared or intercepted.</p> <p>Affected versions: &lt;2.5.48</p> https://vulnerability.circl.lu/vuln/ghsa-fjjq-85mx-vg3v