medium4.1
CVE-2025-66386
app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.
Impact
app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.
Affected products
| Product | Affected versions |
|---|---|
| MISP | before 2.5.27 |
Versions were read from the advisory text. No structured product data has been published for this record yet.