{"action":"Upgrade misp-maltego to 1.4.5 or later.","affected":[{"fixed":"1.4.5","introduced":"0"}],"component":"misp-maltego","cve_ids":["CVE-2020-12889"],"ecosystem":"PyPI","epss":0.0123,"exploited":false,"fixed_versions":["1.4.5"],"ghsa_id":"GHSA-fj35-m94r-9h4c","id":"tcs_01M5KFFF0Q8SADP3YXK2QVTFGN","modified_at":"2023-11-08T04:02:12.202669Z","published_at":"2022-05-24T17:17:59Z","references":["https://osv.dev/vulnerability/GHSA-fj35-m94r-9h4c","https://nvd.nist.gov/vuln/detail/CVE-2020-12889","https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b","https://github.com/MISP/MISP-maltego","https://github.com/advisories/GHSA-fj35-m94r-9h4c","https://github.com/pypa/advisory-database/tree/main/vulns/misp-maltego/PYSEC-2020-66.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fj35-m94r-9h4c","url":"https://osv.dev/vulnerability/GHSA-fj35-m94r-9h4c"}],"summary":"Maltego incorrectly shares a MISP connection across users in a remote-transform use case"}