CVE-2023-37306

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p43

Published

Jun 30, 2023 (Jun 30, 2023)

Modified

Jun 23, 2026

Description

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.

Vendors: misp-project
Products: misp
Weakness: CWE-209
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.