CVE-2024-45509

Publication date

2024-09-01 00:00:00

Family

mitre

State

PUBLISHED

Description

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.