CVE-2024-25674

Summary

CVE-2024-25674 is a vulnerability affecting MISP (Malware Information Sharing Project) before version 2.4.184. This issue stems from inadequate security measures in the handling of organisation logo uploads. Specifically, MISP fails to perform checks on file extensions and MIME types, potentially allowing malicious files with unintended types to be uploaded and potentially compromising system security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.