high7.5
CVE-2020-28043
MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.
Impact
MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | through 2.4.133 |