medium6.5
CVE-2024-45509
In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org ad…
Impact
In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | before 2.4.197 |