CVE-2025-66384
BaseFortify
Publication date: 2025-11-28
Last updated on: 2025-11-28
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| misp | misp | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-684 | The code does not function according to its published specifications, potentially leading to incorrect usage. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in MISP versions before 2.5.24 in the app/Controller/EventsController.php file. It involves invalid logic when checking the validity of uploaded files, specifically related to the tmp_name attribute, which could lead to improper handling of file uploads.
How can this vulnerability impact me? :
The vulnerability can lead to improper validation of uploaded files, potentially allowing attackers to upload malicious files or manipulate file handling processes. This could result in partial compromise of confidentiality, high impact on integrity, and low impact on availability of the affected system.