MISP Improper UUID Validation Vulnerability in Collections

A vulnerability exists in MISP Collections versions prior to 2.5.37 due to inadequate validation of UUIDs in the uuid field, failing to comply with RFC 4122 standards. This flaw allows users to create or modify Collection records with malformed UUIDs, which could lead to data integrity problems or unpredictable behavior in areas of the code that rely on Collection UUIDs being valid. The issue has been addressed by implementing model-level validation for the uuid field, ensuring that only properly formatted UUIDs are accepted.

Impact

The lack of proper UUID validation could cause data integrity issues and disrupt functionality in code sections that depend on valid Collection UUIDs.

Remediation

Users can upgrade to MISP version 2.5.37 or later to address this vulnerability.