Jeroen Pinoy

Ail Framework Crawler: Missing Cookiejar Authorization Check Allows Cross-Organization Cookiejar Attachment

AIL Framework Onion Module: Non-Onion URL Accepted as Crawler Task Due to Bypassed Domain Validation

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP Information Disclosure via Forged Upload Path