deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1471
Published: 2023-03-17
Description: The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L243; https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L246; https://www.wordfence.com/threat-intel/vulnerabilities/id/8281cb20-73d3-4ab5-910e-d353b2a5cbd8?source=cve
CVE: CVE-2023-1472
Published: 2023-03-17
Description: The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Actions include resetting the API key, accessing or deleting log files, and deleting cache among others.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/unusedcss/tags/1.7.1/includes/modules/unused-css/UnusedCSS_Admin.php#L70; https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9ee168-82b1-4d13-a84e-379f16dcb283?source=cve; https://plugins.trac.wordpress.org/browser/unusedcss/tags/1.7.1/includes/modules/unused-css/UnusedCSS_Admin.php#L70
CVE: CVE-2023-1474
Published: 2023-03-17
Description: A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_question_paper.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223336.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/19FF/bug_report/blob/main/SQLi.md; https://vuldb.com/?ctiid.223336; https://vuldb.com/?id.223336
CVE: CVE-2023-1475
Published: 2023-03-17
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of the argument uemail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223337 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://blog.csdn.net/weixin_43864034/article/details/129623847; https://vuldb.com/?ctiid.223337; https://vuldb.com/?id.223337
CVE: CVE-2023-23622
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to. 

In version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic's category read restrictions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164; https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48b4184f; https://github.com/discourse/discourse/pull/20004
CVE: CVE-2023-26040
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse/commit/a373bf2a01488c206e7feb28a9d2361b22ce6e70; https://github.com/discourse/discourse/security/advisories/GHSA-ccfc-qpmp-gq87; https://github.com/discourse/discourse/commit/a373bf2a01488c206e7feb28a9d2361b22ce6e70
CVE: CVE-2022-46854
Published: 2023-03-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/launchpad-by-obox/wordpress-launchpad-plugin-1-0-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/launchpad-by-obox/wordpress-launchpad-plugin-1-0-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-46867
Published: 2023-03-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/universal-star-rating/wordpress-universal-star-rating-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/universal-star-rating/wordpress-universal-star-rating-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-0027
Published: 2023-03-17
Description: Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766
CVE: CVE-2023-25172
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, a maliciously crafted URL can be included in a user's full name field to to carry out cross-site scripting attacks on sites with a disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. The vulnerability is patched in version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches. As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915; https://github.com/discourse/discourse/commit/c186a[PII_REDACTED]0e8efc425dec2133e7a99fa9a; https://github.com/discourse/discourse/pull/20008
CVE: CVE-2023-28107
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches, a user logged as an administrator can request backups multiple times, which will eat up all the connections to the DB. If this is done on a site using multisite, then it can affect the whole cluster. The vulnerability is patched in version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/discourse/discourse/commit/0bd64788d2b4680c04fbef76314a24884d65fed9; https://github.com/discourse/discourse/commit/78a3efa7104eed6dd3ed7a06a71e2705337d9e61; https://github.com/discourse/discourse/pull/20700
CVE: CVE-2023-28111
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse's server-side request forgery (SSRF) protection for private IPv4 addresses by using a IPv4-mapped IPv6 address. The issue is patched in the latest beta and tests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-918
References: https://github.com/discourse/discourse/commit/fd16eade7fcc6bba4b71e71106a2eb13cdfdae4a; https://github.com/discourse/discourse/pull/20710; https://github.com/discourse/discourse/security/advisories/GHSA-26h3-8ww8-v5fc
CVE: CVE-2023-28112
Published: 2023-03-17
Description: Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being passed to FastImage without SSRF protection. Insufficient protections could enable attackers to trigger outbound network connections from the Discourse server to private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prior. This issue is patched in version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-918
References: https://github.com/discourse/discourse/commit/39c2f63b35d90ebaf67b9604cf1d424e5984203c; https://github.com/discourse/discourse/pull/20710; https://github.com/discourse/discourse/security/advisories/GHSA-9897-x229-55gh
CVE: CVE-2023-27591
Published: 2023-03-17
Description: Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.0.0.1/8` (the default). A patch is available in Miniflux 2.0.43. As a workaround, set `METRICS_COLLECTOR` to `false` (default) or run Miniflux behind a trusted reverse-proxy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-1220
References: https://github.com/miniflux/v2/pull/1745; https://github.com/miniflux/v2/releases/tag/2.0.43; https://github.com/miniflux/v2/security/advisories/GHSA-3qjf-qh38-x73v
CVE: CVE-2023-27592
Published: 2023-03-17
Description: Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically proxy images served over HTTP to prevent mixed content errors. 

When an outbound request made by the Go HTTP client fails, the `html.ServerError` is returned unescaped without the expected Content Security Policy header added to valid responses.

By creating an RSS feed item with the inline description containing an `<img>` tag with a `srcset` attribute pointing to an invalid URL like `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error condition where the invalid URL is returned unescaped and in full.

This results in JavaScript execution on the Miniflux instance as soon as the user is convinced (e.g. by a message in the alt text) to open the broken image.

An attacker can execute arbitrary JavaScript in the context of a victim Miniflux user when they open a broken image in a crafted RSS feed. This can be used to perform actions on the Miniflux instance as that user and gain administrative access to the Miniflux instance if it is reachable and the victim is an administrator.

A patch is available in version 2.0.43. As a workaround sisable image proxy; default value is `http-only`.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L76; https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L90; https://github.com/miniflux/v2/pull/1746
CVE: CVE-2023-27593
Published: 2023-03-17
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a `hostPath` mount of that directory in the agent pod. By replacing the CNI binary with their own malicious binary and waiting for the creation of a new pod on the node, the attacker can gain access to the underlying node.

The issue has been fixed and the fix is available on versions 1.11.15, 1.12.8, and 1.13.1. Some workarounds are available. Kubernetes RBAC should be used to deny users and service accounts `exec` access to Cilium agent pods. In cases where a user requires `exec` access to Cilium agent pods, but should not have access to the underlying node, no workaround is possible.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-276
References: https://github.com/cilium/cilium/pull/24075; https://github.com/cilium/cilium/releases/tag/v1.11.15; https://github.com/cilium/cilium/releases/tag/v1.12.8
CVE: CVE-2023-27594
Published: 2023-03-17
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled.

This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default.

The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://github.com/cilium/cilium/releases/tag/v1.11.15; https://github.com/cilium/cilium/releases/tag/v1.12.8; https://github.com/cilium/cilium/releases/tag/v1.13.1
CVE: CVE-2023-24678
Published: 2023-03-17
Description: A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a crafted Zigbee message.
CVSS Score: 7.5 (HIGH)
References: https://github.com/iot-sec23/IoT-CVE/blob/main/Centralite%20Pearl%20Thermostat%20Vulnerability%20Report.pdf; https://www.centralite.com/%3B; https://github.com/iot-sec23/IoT-CVE/blob/main/Centralite%20Pearl%20Thermostat%20Vulnerability%20Report.pdf
CVE: CVE-2023-27253
Published: 2023-03-17
Description: A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: http://packetstormsecurity.com/files/173487/pfSense-Restore-RRD-Data-Command-Injection.html; https://github.com/pfsense/pfsense/commit/ca80d18493f8f91b21933ebd6b714215ae1e5e94; https://redmine.pfsense.org/issues/13935
CVE: CVE-2023-27595
Published: 2023-03-17
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: https://github.com/cilium/cilium/pull/24336; https://github.com/cilium/cilium/releases/tag/v1.13.1; https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhpp
CVE: CVE-2023-28115
Published: 2023-03-17
Description: Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the `file_exists()` function. If an attacker can upload files of any type to the server he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution especially when snappy is used with frameworks with documented POP chains like Laravel/Symfony vulnerable developer code. If a user can control the output file from the `generateFromHtml()` function, it will invoke deserialization. This vulnerability is capable of remote code execution if Snappy is used with frameworks or developer code with vulnerable POP chains. It has been fixed in version 1.4.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/KnpLabs/snappy/blob/5126fb5b335ec929a226314d40cd8dad497c3d67/src/Knp/Snappy/AbstractGenerator.php#L670; https://github.com/KnpLabs/snappy/commit/1ee6360cbdbea5d09705909a150df7963a88efd6; https://github.com/KnpLabs/snappy/commit/b66f79334421c26d9c244427963fa2d92980b5d3
CVE: CVE-2023-28116
Published: 2023-03-17
Description: Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system.  The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf.  When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-787
References: https://github.com/contiki-ng/contiki-ng/pull/2398; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqp; https://github.com/contiki-ng/contiki-ng/pull/2398
CVE: CVE-2023-24278
Published: 2023-03-18
Description: Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/; https://www.openwall.com/lists/oss-security/2023/03/16/1; https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/
CVE: CVE-2023-26113
Published: 2023-03-18
Description: Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/kobezzza/Collection/blob/be32c48e68f49d3be48a58e929d1ab8ff1d2d19c/dist/node/iterators/extend.js%23L324; https://github.com/kobezzza/Collection/commit/d3d937645f62f37d3115d6aa90bb510fd856e6a2; https://github.com/kobezzza/Collection/issues/27
CVE: CVE-2023-1479
Published: 2023-03-18
Description: A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223362 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/xyaly163/bug_report/blob/main/UPLOAD.md; https://vuldb.com/?ctiid.223362; https://vuldb.com/?id.223362
CVE: CVE-2023-1480
Published: 2023-03-18
Description: A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223363.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xyaly163/bug_report/blob/main/SQLi-1.md; https://vuldb.com/?ctiid.223363; https://vuldb.com/?id.223363
CVE: CVE-2023-1481
Published: 2023-03-18
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The manipulation of the argument id with the input "><script>alert(111)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223364.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/xyaly163/bug_report/blob/main/XSS-1.md; https://vuldb.com/?ctiid.223364; https://vuldb.com/?id.223364
CVE: CVE-2023-1482
Published: 2023-03-18
Description: A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-94
References: https://gitee.com/Hk_Cms/HkCms/issues/I6J7ZD; https://vuldb.com/?ctiid.223365; https://vuldb.com/?id.223365
CVE: CVE-2023-1483
Published: 2023-03-18
Description: A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0K; https://vuldb.com/?ctiid.223366; https://vuldb.com/?id.223366
CVE: CVE-2023-1484
Published: 2023-03-18
Description: A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://gitee.com/xzjie/cms/issues/I6INIT; https://vuldb.com/?ctiid.223367; https://vuldb.com/?id.223367
CVE: CVE-2023-28606
Published: 2023-03-18
Description: js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/MISP/MISP/commit/30255b8d683df4ec54f856282b3bde9106d5ae1a; https://github.com/MISP/MISP/compare/v2.4.168...v2.4.169; https://github.com/MISP/MISP/commit/30255b8d683df4ec54f856282b3bde9106d5ae1a