CVE-2017-13671

2017-08-2419:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

CPENameOperatorVersion
mispeq2.3.71
mispeq2.4.40
mispeq2.3.158
mispeq2.3.99
mispeq2.3.68
mispeq2.3.145
mispeq2.3.15
mispeq2.3.45
mispeq2.3.39
mispeq2.4.71