CVE-2026-44363
mediumPriorität · verfolgen · 0EPSS 0.001 · 1. PerzentilDEEUUSEPSS · bewertet 2026-10-27
MISP modules are autonomous modules that can be used to extend MISP for new services. Prior to 3.0.7, an unsafe remote resource fetching vulnerability existed in MISP Modules expansion modules. The html_to_markdown module accepted arbitrary HTTP(S) URLs without sufficient validation, which could allow Server-Side Request Forgery against loopback, private, or link-local network resources. Additionally, the qrcode module disabled TLS certificate verification when retrieving remote images, exposing requests to potential man-in-the-middle interception or response tampering. The issue was fixed by validating URL schemes, blocking local and private address ranges, resolving hostnames before fetching, enforcing request timeouts, and re-enabling TLS certificate verification. This vulnerability is fixed in 3.0.7.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.5–5.8
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (4)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2026-1547MISP und MISP Modules: Mehrere SchwachstellenDeutsch2026-05-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in MISP und MISP Modules ausnutzen, um Informationen offenzulegen, um Admin-Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
- GHSA-fhq3-2gf3-8f3jmisp-modules has nsafe remote resource fetching in expansion2026-05-06ghsa · osvUS
An unsafe remote resource fetching vulnerability existed in MISP Modules expansion modules. The html_to_markdown module accepted arbitrary HTTP(S) URLs without sufficient validation, which could allow Server-Side Request Forgery against loopback, private, or link-local network resources. Additionally, the qrcode module disabled TLS certificate verification when retrieving remote images, exposing requests to potential man-in-the-middle interception or response tampering. The issue was fixed by validating URL schemes, blocking local and private address ranges, resolving hostnames before fetching, enforcing request timeouts, and re-enabling TLS certificate verification. As reported by Bilal Teke.
- PYSEC-2026-2650misp-modules has nsafe remote resource fetching in expansion2026-07-13vendor · osvUS
An unsafe remote resource fetching vulnerability existed in MISP Modules expansion modules. The html_to_markdown module accepted arbitrary HTTP(S) URLs without sufficient validation, which could allow Server-Side Request Forgery against loopback, private, or link-local network resources. Additionally, the qrcode module disabled TLS certificate verification when retrieving remote images, exposing requests to potential man-in-the-middle interception or response tampering. The issue was fixed by validating URL schemes, blocking local and private address ranges, resolving hostnames before fetching, enforcing request timeouts, and re-enabling TLS certificate verification. As reported by Bilal Teke.
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/MISP/MISP/releasesPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2026-44363cnnvd
- https://github.com/MISP/misp-modules/commit/01a522f2772fc31eeed379ccf23750c8a3d401dbenisa_euvd
- https://github.com/MISP/misp-modules/security/advisories/GHSA-fhq3-2gf3-8f3jenisa_euvd
- https://github.com/MISP/misp-modules/commit/01a522f2772fc31eeed379ccf23750c8a3d401dbnvd
- https://github.com/MISP/misp-modules/security/advisories/GHSA-fhq3-2gf3-8f3jnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan