Claude Opus 5 (1M context)

MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events

MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL

MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion