MISP Modules Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the MISP Modules website, affecting versions through 3.0.7. The issue arises because the home blueprint was exempt from CSRF protection, allowing an attacker to trick an authenticated user into sending unintended requests to the home endpoint. This could lead to unauthorized modifications of session query data for the affected user.

Impact

Exploitation of this vulnerability could result in Cross-Site Request Forgery, allowing for unauthorized actions to be performed on behalf of an authenticated user.