CVE-2023-48657

CriticalCVSS 9.8/10Last modified Jun 23, 2026

Description

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/MISP/MISP/commit/08bd23281ead288de678de666ef43ed6de1899fcPatch
https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176Issue Tracking, Patch, Release Notes
https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/
https://github.com/MISP/MISP/commit/08bd23281ead288de678de666ef43ed6de1899fcPatch
https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176Issue Tracking, Patch, Release Notes
https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/

Timeline

Published: Nov 17, 2023
Last modified: Jun 23, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-486589.8An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, peri CVE-2023-486599.8An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.CVE-2023-48669.8A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the CVE-2023-486607.5Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this v CVE-2023-486614.9Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges coul CVE-2023-486627.2Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could p CVE-2023-486637.2Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could p CVE-2023-486647.2Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could p CVE-2023-486657.2Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could p CVE-2023-486677.2Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in a CVE-2023-486686.7Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerabil CVE-2023-48678.8A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unkn