Threats tagged 'ghsa-h3wj-j4hx-vx4c'

The MISP Modules website component has a vulnerability in its external tools management endpoints that allows unauthenticated attackers to add, delete, modify, and toggle external tools without authorization. This occurs because the external tools handlers do not enforce the administrator authentication policy even when ADMIN_PASSWORD is set. The flaw affects the external_tools Flask blueprint and enables bypass of intended access controls. Installations without an admin password are designed to allow open management access, so the vulnerability is conditional on ADMIN_PASSWORD being configured.