{ "id": "CVE-2024-25674", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-09T09:15:08.597", "lastModified": "2024-02-09T14:31:23.603", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type." }, { "lang": "es", "value": "Se descubri\u00f3 un problema en MISP antes de la versi\u00f3n 2.4.184. La carga del logotipo de la organizaci\u00f3n no es segura debido a la falta de comprobaciones de la extensi\u00f3n del archivo y el tipo MIME." } ], "metrics": {}, "references": [ { "url": "https://github.com/MISP/MISP/commit/312d2d5422235235ddd211dcb6bb5bb09c07791f", "source": "cve@mitre.org" }, { "url": "https://github.com/MISP/MISP/compare/v2.4.183...v2.4.184", "source": "cve@mitre.org" } ] }