CVE-2020-28043

MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.

Date published : 2020-11-01

https://github.com/MISP/MISP/commit/6e81c8ee8ad19576c055b5c4773f914b918f32be