medium4.3
CVE-2020-15412
An issue was discovered in MISP 2.4.128.
Impact
An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | Version 2.4.128 |