app/Controller/AuditLogsController.php in MISP prior to 2.4.182 mishandles ACLs for audit logs.
misp misp