Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MISP 安全漏洞
Vulnerability Description
MISP是一套开源的用于收集、存储、分发和共享网络安全指标和威胁网络安全事件分析和恶意软件分析的软件解决方案。 MISP 2.4.92版本中的app/Controller/UsersController.php文件存在安全漏洞，该漏洞源于暴力破解保护只应用于POST请求。攻击者可通过在登录部分使用PUT HTTP方法而非POST HTTP方法利用该漏洞绕过暴力破解保护。
CVSS Information
N/A
Vulnerability Type
N/A