In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.Referenceshttps://github.com/MISP/MISP/commit/e05dc512a437284f14624da23cca4a829a76aebf
