CVE-2017-16802

2017-11-1316:29:00

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.

CPENameOperatorVersion
mispeq2.3.71
mispeq2.4.40
mispeq2.3.158
mispeq2.3.99
mispeq2.3.68
mispeq2.3.145
mispeq2.3.15
mispeq2.3.45
mispeq2.3.39
mispeq2.4.71