Vulnerability Details CVE-2018-19908
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filename of the STIX import.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.172
EPSS Ranking 96.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- https://github.com/MISP/MISP/commit/211ac0737281b65e7da160f0aac52f401a94e1a3
- https://github.com/MISP/MISP/releases/tag/v2.4.99
- https://www.exploit-db.com/exploits/46401/
- https://github.com/MISP/MISP/commit/211ac0737281b65e7da160f0aac52f401a94e1a3
- https://github.com/MISP/MISP/releases/tag/v2.4.99
- https://www.exploit-db.com/exploits/46401/
Products affected by CVE-2018-19908
-
cpe:2.3:a:misp-project:misp:2.4.90
-
cpe:2.3:a:misp-project:misp:2.4.91
-
cpe:2.3:a:misp-project:misp:2.4.92
-
cpe:2.3:a:misp-project:misp:2.4.93
-
cpe:2.3:a:misp-project:misp:2.4.94
-
cpe:2.3:a:misp-project:misp:2.4.95
-
cpe:2.3:a:misp-project:misp:2.4.96
-
cpe:2.3:a:misp-project:misp:2.4.97
-
cpe:2.3:a:misp-project:misp:2.4.98