CVE-2023-50918

Summary

CVE-2023-50918 is a vulnerability affecting the MISP platform before version 2.4.182. In the app/Controller/AuditLogsController.php file, there is a flaw in how Access Control Lists (ACLs) are handled for audit logs. This issue could potentially allow unauthorized users to access audit logs that they should not have been able to view, posing a risk to the confidentiality of audit trail data. It is important for MISP users to upgrade to version 2.4.182 or later to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.