CVE-2020-28947

2020-11-1918:15:15

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.

CPENameOperatorVersion
mispeq2.3.165
mispeq2.3.175
mispeq2.4.37
mispeq2.3.125
mispeq2.1
mispeq2.4.56
mispeq2.3.72
mispeq2.4.121
mispeqcodename/tellurium
mispeq2.3.15

Name	Operator	Version
misp	eq	2.3.165
misp	eq	2.3.175
misp	eq	2.4.37
misp	eq	2.3.125
misp	eq	2.1
misp	eq	2.4.56
misp	eq	2.3.72
misp	eq	2.4.121
misp	eq	codename/tellurium
misp	eq	2.3.15

Rows per page:

1-10 of 3001

References

github.com/MISP/MISP/commit/626ca544ffb5604ea01bb291f69811668b6b5631