Lack of Input Sanitization in MISP Affecting REST Endpoints

CVE-2024-58130

What is CVE-2024-58130?

In MISP versions prior to 2.4.193, the application exhibits a vulnerability in the handling of REST endpoints where responses that are not in JSON format lack proper sanitization. This oversight can potentially allow malicious input to be processed, leading to an increased risk of exploitation and data manipulation. It's crucial for users to upgrade to the latest version to mitigate these security concerns.

References