CVE-2021-27904: Misp-Project Misp

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors.

Affected products

• Misp-Project Misp: up to and including 2.4.139

Published 2021-03-02. Last modified 2026-06-22.