CVE-2015-5719
critical
CVSS v3
9.8
VIR risk
9.8
Description
app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| misp-project | malware_information_sharing_platform | {"endIncluding":"2.3.91"} | |
References
- http://www.securityfocus.com/bid/92740
- https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
- https://www.circl.lu/advisory/CVE-2015-5719/
- http://www.securityfocus.com/bid/92740
- https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699
- https://www.circl.lu/advisory/CVE-2015-5719/
💬 Discuss CVE-2015-5719 on VIR Community →
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.