Design/Logic Flaw

2017-08-2419:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.2%

JSON

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

CPENameOperatorVersion
misple2.4.78

CPE	Name	Operator	Version
	misp	le	2.4.78

References

www.securityfocus.com/bid/100533

github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for PRION:CVE-2017-13671