CyberRota Analysis
AI-GeneratedThe vulnerability in MISP cti-transmute allows authenticated users to access other users' email addresses through the account following-list endpoint, exposing sensitive information unnecessarily. This could enable an attacker to collect email addresses by following multiple accounts, posing a privacy risk. Organizations using this software should prioritize patching to mitigate the potential for data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, get_following() includes the followed user's email field in the API response alongside their name, user ID, and follow date. Because the email address is not required for the functionality and other related user lists omit it, an authenticated attacker could systematically follow users and collect their email addresses. The fix removes user.email from the returned object.