← All advisories

High severity8.2NVD Advisory· Published Nov 28, 2025· Updated Apr 15, 2026

CVE-2025-66384

CVE-2025-66384

Description

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Misp/Mispreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.5.24

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.