← All advisories

Critical severity9.8NVD Advisory· Published May 15, 2020· Updated Jun 17, 2026

CVE-2020-12889

CVE-2020-12889

Description

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
MISP-maltegoPyPI	< 1.4.5	1.4.5

Affected products

3

Misp/Misp Maltego
cpe:2.3:a:misp:misp-maltego:1.4.4:*:*:*:*:*:*:*
MISP/MISP-maltegodescription
ghsa-coords
pkg:pypi/misp-maltego
Range: < 1.4.5

Patches

Vulnerability mechanics

References

4

github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160bnvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-fj35-m94r-9h4cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-12889ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/misp-maltego/PYSEC-2020-66.yamlghsaWEB

News mentions

0

No linked articles in our index yet.