What’s Vulnerable › Vulnerabilities

CVE-2021-31780

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-23 · updated 2026-06-22
• Weakness: CWE-212

Description

In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused.

Affected products

• MISP: 2.4.141

References

• https://github.com/MISP/MISP/commit/a0f08501d2850025892e703f40fb1570c7995478
• https://github.com/MISP/MISP/commit/a0f08501d2850025892e703f40fb1570c7995478

Get alerted when CVE-2021-31780 or the next vulnerability affects your stack