CVE-2024-58130

Summary

CVE-2024-58130 is a vulnerability affecting the MISP platform before version 2.4.193. The issue lies in the RestResponseComponent.php file in the app/Controller/Component directory. It is noted that REST endpoints are missing adequate sanitization for non-JSON responses, potentially exposing users to security risks such as Cross-Site Scripting (XSS) attacks or information leaks. Attackers can exploit this flaw by injecting malicious code or stealing sensitive data through malformed non-JSON responses. It is strongly recommended that users update their MISP installations to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.