CVE-2021-31780: Misp-Project Misp

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused.

Affected products

• Misp-Project Misp: version 2.4.141 only

Published 2021-04-23. Last modified 2026-06-22.