CVE-2022-29534

PoC —

CVSS 3.1

7.5 high

EPSS

2%p74

Published

Apr 20, 2022 (Apr 20, 2022)

Modified

Jun 22, 2026

Description

An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an "Accept: application/json" header.

Vendors: misp-project
Products: misp
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.