Description
app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MISP MISP
Default version status: unaffected
0 to < 2.5.27affected