MISP Path Traversal Vulnerability in Event Report Model for Site Admins

A path traversal vulnerability has been identified in MISP versions prior to 2.5.27. The issue allows site administrators to traverse directories when viewing pictures, potentially leading to unauthorized access to files outside the intended directory.

Impact

Exploitation of this vulnerability could allow a site administrator to access files outside of the designated directory, potentially leading to exposure of sensitive information.

Remediation

Users can upgrade to MISP version 2.5.27 or later to address this vulnerability.