CVE-2023-48656

High

9.8/10

Summary

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

References

Advisory Timeline

Published Nov 17, 2023