CVE-2021-39302

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions[‘org’] value.

Date published : 2021-08-19

https://github.com/MISP/MISP/commit/20d9020b76d1f6790c4d84e020d0cc97c929f66b