In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload.