CVE-2021-3184

2021-01-1916:15:13

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.

CPENameOperatorVersion
mispeq2.4.54
mispeq2.4.119
mispeq2.3.140
mispeq2.3.27
mispeq2.4.101
mispeq2.4.24
mispeq2.3.98
mispeq2.3.76
mispeq2.4.96
mispeq2.4.125

Name	Operator	Version
misp	eq	2.4.54
misp	eq	2.4.119
misp	eq	2.3.140
misp	eq	2.3.27
misp	eq	2.4.101
misp	eq	2.4.24
misp	eq	2.3.98
misp	eq	2.3.76
misp	eq	2.4.96
misp	eq	2.4.125

Rows per page:

1-10 of 3021

References

github.com/MISP/MISP/commit/8283e0fbec551f45f3f181cdb2cf29cddc23df66