Cross site scripting

2019-05-0813:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.

CPENameOperatorVersion
misplt2.4.107

CPE	Name	Operator	Version
	misp	lt	2.4.107

References

github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff