{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"MISP versions ant\u00e9rieures \u00e0 2.4.156","product":{"name":"MISP","vendor":{"name":"MISP","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2022-27245","url":"https://www.cve.org/CVERecord?id=CVE-2022-27245"},{"name":"CVE-2022-27243","url":"https://www.cve.org/CVERecord?id=CVE-2022-27243"},{"name":"CVE-2022-27244","url":"https://www.cve.org/CVERecord?id=CVE-2022-27244"},{"name":"CVE-2022-27246","url":"https://www.cve.org/CVERecord?id=CVE-2022-27246"}],"links":[],"reference":"CERTFR-2022-AVI-283","revisions":[{"description":"Version initiale","revision_date":"2022-03-29T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance (XSS)"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans MISP. Elles\npermettent \u00e0 un attaquant de provoquer une atteinte \u00e0 l'int\u00e9grit\u00e9 des\ndonn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de\nservice \u00e0 distance.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans MISP","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 MISP 61d4d3670593b78e4dab7a11eb620b7a372f30e6 du 25 mars 2022","url":"https://github.com/MISP/MISP/commit/61d4d3670593b78e4dab7a11eb620b7a372f30e6"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 MISP 8cc93687dcd68e1774b55a5c4e8125c0c8ddc288 du 25 mars 2022","url":"https://github.com/MISP/MISP/commit/8cc93687dcd68e1774b55a5c4e8125c0c8ddc288"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 MISP 8dcf414340c5ddedfebbc972601646d38e1d0717 du 25 mars 2022","url":"https://github.com/MISP/MISP/commit/8dcf414340c5ddedfebbc972601646d38e1d0717"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 MISP 08a07a38ae81f3b55d81cfcd4501ac1eb1c9c4dc du 25 mars 2022","url":"https://github.com/MISP/MISP/commit/08a07a38ae81f3b55d81cfcd4501ac1eb1c9c4dc"}]}