CERT24Incomplete MISP Guard tag validation allows non-allowed taxonomy tags to bypass feed policy enforcementLoading data…
CERT24Threat Observatory
Period

Incomplete MISP Guard tag validation allows non-allowed taxonomy tags to bypass feed policy enforcement

MISP Guard checked only whether at least one allowed tag existed for a required taxonomy, rather than verifying that all tags from that taxonomy were allowed. As a result, a non-allowed tag placed alongside an allowed tag could pass validation and bypass the data-distribution policy.

← Back to intelligence

Incomplete MISP Guard tag validation allows non-allowed taxonomy tags to bypass feed policy enforcement

MISP Guard checked only whether at least one allowed tag existed for a required taxonomy, rather than verifying that all tags from that taxonomy were allowed. As a result, a non-allowed tag placed alongside an allowed tag could pass validation and bypass the data-distribution policy.