Lucene search
+L

6 matches found

Prion
Prion
•added 2023/06/30 5:15 p.m.•24 views

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

4.9CVSS7.5AI score0.00502EPSS
SaveExploits3References4Affected Software1
CVE
CVE
•added 2023/06/30 12:00 a.m.•65 views

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

5.4CVSS5.4AI score0.00502EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2023/06/30 12:00 a.m.•29 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.7AI score0.00502EPSS
SaveExploits3References4
Mend
Mend
•added 2023/06/30 12:00 a.m.•2 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.4CVSS0.00502EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/30 12:00 a.m.•4 views

CVE-2023-37307: Improper Neutralization of Input During Web Page Generation

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.4CVSS6AI score0.00502EPSS
SaveExploits3References8
OSV
OSV
•added 2023/06/30 12:00 a.m.•25 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

7.1AI score
SaveExploits0References6
Rows per page
Query Builder