CVE-2020-8890: Misp-Project Misp

Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of invalid requests.

Affected products

• Misp-Project Misp: before 2.4.121 (fixed in 2.4.121)

Published 2020-02-12. Last modified 2026-06-22.