Cross site scripting

2018-05-1818:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.

CPENameOperatorVersion
mispeq2.4.91

CPE	Name	Operator	Version
	misp	eq	2.4.91

References

github.com/MISP/MISP/commit/5efc07b12f82301a6086fd3433fedd69fe7119d3

zigrin.com/advisories/misp-xss-with-cortex-type-attributes/