Lucene search
MitreCVE-2023-24026HistoryJan 20, 2023 - 10:15 p.m.
CVE-2023-24026
2023-01-2022:15:10
CWE-79
mitre
web.nvd.nist.gov
29
misp
xss
vulnerability
event-graph.js
nvd
cve-2023-24026
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.9%
In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload.
Affected configurations
Node
misp-projectmispMatch2.4.167
| Vendor | Product | Version | CPE |
|---|---|---|---|
| misp-project | misp | 2.4.167 | cpe:2.3:a:misp-project:misp:2.4.167:*:*:*:*:*:*:* |
Related
osv
osv
CVE-2023-24026
2023-01-20 22:15:10
cvelist
cvelist
CVE-2023-24026
2023-01-20 00:00:00
prion
prion
Cross site scripting
2023-01-20 22:15:00
nvd
nvd
CVE-2023-24026
2023-01-20 22:15:10
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.9%
Related for CVE-2023-24026