What is GHSA-rm34-4ch6-9j6v?

GHSA-rm34-4ch6-9j6v is a security advisory published by GitHub Security Advisories with Medium severity. app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This...

Which CVE IDs does GHSA-rm34-4ch6-9j6v cover?

GHSA-rm34-4ch6-9j6v covers the following CVE IDs: CVE-2020-14969. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rm34-4ch6-9j6v?

GHSA-rm34-4ch6-9j6v has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-rm34-4ch6-9j6vMediumCVSS 7.5

app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2020-14969 →

📋 Description

app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-14969
https://github.com/MISP/MISP/commit/609bfbd450c933d21c50c9f0161d633c43413eb6
https://github.com/advisories/GHSA-rm34-4ch6-9j6v