CVE-2022-29531

2022-04-2023:15:08

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.9%

JSON

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.

CPENameOperatorVersion
mispeq2.4.54
mispeq2.4.96
mispeq2.4.125
mispeq2.3.78
mispeq2.3.141
mispeq2.4.59
mispeq2.4.49
mispeq2.4.107
mispeq2.3.158
mispeq2.4.95

Name	Operator	Version
misp	eq	2.4.54
misp	eq	2.4.96
misp	eq	2.4.125
misp	eq	2.3.78
misp	eq	2.3.141
misp	eq	2.4.59
misp	eq	2.4.49
misp	eq	2.4.107
misp	eq	2.3.158
misp	eq	2.4.95

Rows per page:

1-10 of 3231

References

github.com/MISP/MISP/commit/bb3b7a7e91862742cae228c43b3091bad476dcc0

github.com/MISP/MISP/compare/v2.4.157...v2.4.158

zigrin.com/advisories/misp-stored-xss-in-the-event-graph/

zigrin.com/cakephp-application-cybersecurity-research-protect-your-website-from-stored-xss-attacks-understanding-and-preventing-vulnerabilities-in-open-source-applications/