CVE-2024-45509: Improper Access Control in MISP Leading to Credential Exposure Description On August 26, the security team at Green Tick Nepal Pvt. Ltd., based in Kathmandu, Nepal, identified a vulnerability in MISP (version 2.4.196). The issue is in app/Controller/BookmarksController.php, where access control is insufficiently enforced. This flaw allows unauthorized users, who are not organization administrators, […]
