What is the CVSS score of CVE-2025-66384?

CVE-2025-66384 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of PHP are affected by CVE-2025-66384?

Organizations using MISP face notable risk from CVE-2025-66384 rated CVSS 8.2. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems.

How to fix or mitigate CVE-2025-66384?

Within 7 days: Identify all affected systems running MISP and apply vendor patches promptly. Monitor vendor channels for patch availability.

PHP CVE-2025-66384

HIGH

Incorrect Provision of Specified Functionality (CWE-684)

2025-11-28 cve@mitre.org

PHP Information Disclosure

8.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:24 vuln.today

CVE Published

Nov 28, 2025 - 07:15 nvd

HIGH 8.2

DescriptionNVD

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name.

AnalysisAI

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-684. app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name. Version information: before 2.5.24.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-66384 vulnerability details – vuln.today

Back