MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-29006.json"