A cross-site request forgery vulnerability in MISP cti-transmute allows an attacker to trigger unauthorized administrative user deletion, posing a significant risk to system integrity.

The application is susceptible to a Cross-Site Request Forgery (CSRF) attack in the administrative user deletion function. This vulnerability is exploitable by an unauthenticated attacker, as indicated by the CVSS vector.

The ability for an attacker to delete administrative users can lead to a complete loss of administrative control over the application. Given the CVSS score of 8.8, this vulnerability is classified as high severity, as it can cause significant operational disruption and unauthorized access to system management functions.

Immediate Action: Review the project repository for available security patches or updates beyond version 1.4.0 and apply them immediately.

Proactive Monitoring: Monitor server access logs for suspicious requests directed at user management endpoints that do not originate from legitimate administrative sessions.

Compensating Controls: Implement a Web Application Firewall (WAF) with robust CSRF protection rules to inspect and filter malicious requests targeting administrative functions.

Public Exploit Available: No

The high CVSS score reflects the critical nature of maintaining administrative integrity. Organizations should prioritize updating their installation to a version where this CSRF vulnerability is remediated to prevent unauthorized account management actions.