CVE-2020-12889

9.8 criticalEPSS 1.2%

Critical (9.8) in misp misp-maltego. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in misp-maltego 1.4.5.

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2020-05-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-fj35-m94r-9h4c	PyPI	misp-maltego	<1.4.5	1.4.5
PYSEC-2020-66	PyPI	misp-maltego	<1.4.5	1.4.5