{"id":"CVE-2023-37306","details":"MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.","modified":"2026-08-12T03:30:35.569745156Z","published":"2023-06-30T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37306.json"},"references":[{"type":"WEB","url":"https://www.synacktiv.com/publications/php-filter-chains-file-read-from-error-based-oracle"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37306.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37306"},{"type":"FIX","url":"https://github.com/MISP/MISP/commit/f125630c1c2d0f5d11079d3653ab7bb2ab5cd908"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/misp/misp","events":[{"introduced":"19e969892fc9c3765456a5f491af392e7d20adeb"},{"fixed":"f125630c1c2d0f5d11079d3653ab7bb2ab5cd908"}],"database_specific":{"cpe":"cpe:2.3:a:misp-project:misp:2.4.172:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.4.172"},{"last_affected":"2.4.172"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.4.172","v2.4.172"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-37306.json"}}],"schema_version":"1.9.0"}