CVE-2015-5721 - Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp

Back Back to CVE browser

CRITICAL

Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp

Published Sep 3, 2016

9.8

CRITICAL

CVSS 3.0

EPSS 2.63%

Description

Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://www.securityfocus.com/bid/92739
vdb-entryx_refsource_BID
https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56
x_refsource_CONFIRMIssue TrackingPatch
https://www.circl.lu/advisory/CVE-2015-5721/
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/92739		vdb-entryx_refsource_BID
https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56		x_refsource_CONFIRMIssue TrackingPatch
https://www.circl.lu/advisory/CVE-2015-5721/		x_refsource_CONFIRMThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 3, 2016

Updated Aug 6, 2024

Reserved Aug 3, 2015

Link CVE-2015-5721

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 23, 2026

Link CVE-2015-5721

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-5721