critical9.8
CVE-2020-29006
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
Impact
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | before 2.4.135 |