Vulnerability — CVE-2022-48328

CVE-2022-48328

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-48328
Description:: app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.
Last updated date:: 02/16/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 02/16/2024
Reference url to background: https://zigrin.com/cakephp-application-cybersecurity-research-hiding-in-plain-sight-the-hidden-danger-of-sql-injection-in-input-field-names/