Design/Logic Flaw

2017-11-1316:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.7%

JSON

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.

CPENameOperatorVersion
mispeq2.4.82

CPE	Name	Operator	Version
	misp	eq	2.4.82

References

github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for PRION:CVE-2017-16802