← Back to CVE List

CVE-2019-12868

Published: 2019-06-18T00:15Z
Last Modified: 2024-11-21T04:23Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt