What’s Vulnerable › Vulnerabilities

CVE-2020-15711

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-14 · updated 2026-06-22
• Weakness: CWE-352

Description

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

Affected products

• MISP: before 2.4.129 — fixed in 2.4.129

How to fix

Upgrade to a fixed version: MISP 2.4.129. Check the vendor advisory for mitigations.

References

• https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8
• https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129
• https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8
• https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129

Get alerted when CVE-2020-15711 or the next vulnerability affects your stack