{"action":"Upgrade misp-maltego to 1.4.5 or later.","affected":[{"fixed":"1.4.5","introduced":"0"}],"component":"misp-maltego","cve_ids":["CVE-2020-12889"],"ecosystem":"PyPI","epss":0.0123,"exploited":false,"fixed_versions":["1.4.5"],"ghsa_id":"GHSA-fj35-m94r-9h4c","id":"tcs_01M5KGASWQCPDTKF935AS3WYX3","modified_at":"2023-11-08T04:02:12.202669Z","published_at":"2020-05-15T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-66","https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b","https://github.com/advisories/GHSA-fj35-m94r-9h4c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-66","url":"https://osv.dev/vulnerability/PYSEC-2020-66"}],"summary":"MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case."}