CVE-2019-19379: Misp-Project Misp

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.

Affected products

• Misp-Project Misp: version 2.4.118 only

Published 2019-11-28. Last modified 2026-06-22.