MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

Update 2020-09-21-MISP.2.4.132.released.md

pull/27/head
Andras Iklody 2020-09-21 10:14:01 +02:00 committed by GitHub
parent e92f009a8d
commit 98acb47bb6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_posts/2020-09-21-MISP.2.4.132.released.md
View File

@ -21,7 +21,7 @@ An issue was discovered in MISP before 2.4.132. This could lead to an unwanted a
It was discovered that under certain situations (resource exhaustion when retrieving sessions data for example), a user could incorrectly receive the login page as a response when paginating the event view's attribute list. This in itself should not cause any issues, but due to a bug in the login form's GET/POST exchange, the user actually having a valid session would instead retrieve the event index, on which the first form was submitted (which was an event deletion). In normal situations this is extremely rare and we have only identiefied a handful of such deletions on our most heavily used community instances. It was discovered that under certain situations (resource exhaustion when retrieving sessions data for example), a user could incorrectly receive the login page as a response when paginating the event view's attribute list. This in itself should not cause any issues, but due to a bug in the login form's GET/POST exchange, the user actually having a valid session would instead retrieve the event index, on which the first form was submitted (which was an event deletion). In normal situations this is extremely rare and we have only identiefied a handful of such deletions on our most heavily used community instances.
Version 2.4.133 will include a new diagnsotic tool that highlights deletions from the time period when the bug was active along with a recovery functionality. Version 2.4.133 will include a new diagnostic tool that highlights deletions from the time period when the bug was active along with a recovery functionality.
# Many bugs fixed and small improvements # Many bugs fixed and small improvements