CVE-2020-15412: Misp-Project Misp

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form.

Affected products

• Misp-Project Misp: version 2.4.128 only

Published 2020-06-30. Last modified 2026-06-22.