CVE-2024-25675

    Dashboard / Vulnerabilities / CVE-2024-25675

    CVE-2024-25675

    Published: 9 Feb 2024Last Modified: 28 Oct 2026

    Summary:

    Details: An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp.

    References: https://github.com/MISP/MISP/compare/v2.4.183...v2.4.184, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25675.json, https://nvd.nist.gov/vuln/detail/CVE-2024-25675, https://github.com/MISP/MISP/commit/0ac2468c2896f4be4ef9219cfe02bff164411594

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -fd9c49d45b3a04a203ae247b9220493a62e347a0

    Affected versions

    v2.4.175
    v2.4.183
    v2.4.169
    v2.4.153
    v2.4.152
    v2.4.137
    v2.4.136
    v2.4.134
    v2.4.133
    v2.4.130
    v2.4.128
    v2.4.127
    v2.4.125
    v2.4.123
    v2.4.122
    v2.4.121
    v2.4.120
    v2.4.118
    v2.4.111
    v2.4.110
    v2.4.109
    v2.4.107
    v2.4.106
    v2.4.102
    v2.4.101
    v2.4.100
    v2.4.98
    v2.4.96
    v2.4.95
    v2.4.94
    v2.4.93
    v2.4.91
    v2.4.89
    v2.4.88
    v2.4.87
    v2.4.86
    v2.4.85
    v2.4.83
    v2.4.82
    v2.4.80
    v2.4.78
    v2.4.65
    v2.4.64
    v2.4.63
    v2.4.62
    v2.4.61
    v2.4.60
    v2.4.59
    v2.4.58
    v2.4.57
    v2.4.56
    v2.4.54
    v2.4.53
    v2.4.52
    v2.4.51
    v2.4.50
    v2.4.48
    v2.4.47
    v2.4.46
    v2.4.45
    v2.4.43
    v2.4.39
    v2.4.38
    v2.4.37
    v2.4.36
    v2.4.35
    v2.4.34
    v2.4.27
    v2.4.26
    v2.4.25
    v2.4.24
    v2.4.23
    v2.4.22
    v2.4.21
    v2.4.20
    v2.4.18
    v2.4.17
    v2.4.16
    v2.4.15
    v2.4.14
    v2.4.13
    v2.4.11
    v2.4.10
    v2.4.9
    v2.4.7
    v2.4.5
    v2.4.4
    v2.4.3
    v2.4.2
    v2.4.1
    v2.4.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High