Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization.

  • Published: Jun 18, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-12868
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
misp / misp 2.4.109 2.4.109.x