CVE-2020-25766

HighCVSS 7.5/10Last modified Jun 22, 2026

Description

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/MISP/MISP/commit/164963100a830234744a6004d5eda55d24e97b2aPatch, Third Party Advisory
https://github.com/MISP/MISP/compare/v2.4.131...v2.4.132Patch, Third Party Advisory
https://github.com/MISP/MISP/commit/164963100a830234744a6004d5eda55d24e97b2aPatch, Third Party Advisory
https://github.com/MISP/MISP/compare/v2.4.131...v2.4.132Patch, Third Party Advisory

Timeline

Published: Sep 18, 2020
Last modified: Jun 22, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-257677.5An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a d CVE-2020-257685.3Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in f CVE-2020-25774.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.28 and prior and CVE-2020-257705.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive inform CVE-2020-257715.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive inform CVE-2020-257725.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive inform CVE-2020-257737.8A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected prod CVE-2020-257744.3A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red informatio CVE-2020-257756.3The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerabi CVE-2020-257767.8Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a CVE-2020-257775.4Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the CVE-2020-257786.0Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel poi