CVE-2020-8893

2020-02-1200:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp.

CPENameOperatorVersion
mispeq2.3.78
mispeq2.3.79
mispeq2.4.90
mispeq2.4.55
mispeq2.3.92
mispeq2.3.146
mispeq2.4.72
mispeq2.4.110
mispeq2.4.5
mispeq2.3.19

Name	Operator	Version
misp	eq	2.3.78
misp	eq	2.3.79
misp	eq	2.4.90
misp	eq	2.4.55
misp	eq	2.3.92
misp	eq	2.3.146
misp	eq	2.4.72
misp	eq	2.4.110
misp	eq	2.4.5
misp	eq	2.3.19

Rows per page:

1-10 of 2861

References

github.com/MISP/MISP/commit/3d982d92fd26584115c01f8c560a688d1096b65c

github.com/MISP/MISP/compare/v2.4.120...v2.4.121

zigrin.com/advisories/misp-bruteforce-protection-not-working-in-very-specific-environments/

zigrin.com/advisories/misp-reflected-xss-in-galaxy-view/