Design/Logic Flaw

2020-03-0919:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sighting_field.ctp.

CPENameOperatorVersion
mispeq2.4.122

CPE	Name	Operator	Version
	misp	eq	2.4.122

References

github.com/MISP/MISP/commit/e24a9eb44c1306adb02c1508e8f266ac6b95b4ed

github.com/MISP/MISP/releases/tag/v2.4.123