Critical severity9.8NVD Advisory· Published Nov 17, 2023· Updated Jun 23, 2026

CVE-2023-48658

Description

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Misp/Misp3 versions
cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*range: <2.4.176
- (no CPE)range: <2.4.176
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/MISP/MISP/commit/168621521b57b2437331174186f84a6aa3e71f0dnvdPatch
github.com/MISP/MISP/compare/v2.4.175...v2.4.176nvdIssue TrackingPatchRelease Notes
zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000