What is GHSA-wmf5-gp42-gq5m?

GHSA-wmf5-gp42-gq5m is a security advisory published by GitHub Security Advisories with Critical severity. MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php...

Which CVE IDs does GHSA-wmf5-gp42-gq5m cover?

GHSA-wmf5-gp42-gq5m covers the following CVE IDs: CVE-2020-29006. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wmf5-gp42-gq5m?

GHSA-wmf5-gp42-gq5m has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-wmf5-gp42-gq5mCriticalCVSS 9.8

MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2020-29006 →

📋 Description

MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-29006
https://github.com/MISP/MISP/commit/423750573d07f1a463f115ef37182c1825080da4
https://github.com/MISP/MISP/compare/v2.4.134...v2.4.135
https://github.com/advisories/GHSA-wmf5-gp42-gq5m