Critical severity9.8NVD Advisory· Published Sep 3, 2016· Updated Jun 23, 2026

CVE-2015-5719

Description

app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Misp/Mispreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*range: <=2.3.91
- (no CPE)range: <2.3.92

Patches

Vulnerability mechanics

References

github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699nvdIssue TrackingPatch
www.circl.lu/advisory/CVE-2015-5719/nvdThird Party Advisory
www.securityfocus.com/bid/92740nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000