CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page.
Date published : 2020-09-18
https://github.com/MISP/MISP/commit/164963100a830234744a6004d5eda55d24e97b2a