CVE-2015-5719: Misp-Project Misp

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.

Affected products

• Misp-Project Misp: up to and including 2.3.91

Published 2016-09-03. Last modified 2026-06-23.