5395 matches found
PT-2023-31413 · Misp · Misp
Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.179 Description: The issue allows for XSS in the event timeline widget. This is due to a problem in the app/Lib/Tools/EventTimelineTool.php file. Recommendations: For versions prior to 2.4.179, update to version...
CVE-2023-49926
Summary : CVE-2023-49926 affects MISP prior to 2.4.179, where the event timeline widget is vulnerable to XSS via the file app/Lib/Tools/EventTimelineTool.php. The root cause is insufficient filtering/escaping of user-supplied data in the event timeline tool. Impact (per sources) : Unauthorized ex...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-42916
creationtimestamp| type| source ---|---|--- 2023-11-30 22:15:32+00:00| exploited| https://t.me/informationsecuritychannel/51087 2023-12-01 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1172 2023-12-01 05:28:41+00:00| seen| https://t.me/thehackernews/4217 2023-12-01...
CVE-2023-42917
creationtimestamp| type| source ---|---|--- 2023-11-30 22:15:32+00:00| exploited| https://t.me/informationsecuritychannel/51087 2023-12-01 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1172 2023-12-01 05:28:41+00:00| seen| https://t.me/thehackernews/4217 2023-12-01...
CVE-2023-48365
creationtimestamp| type| source ---|---|--- 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30 17:55:24+00:00| seen| https://t.me/truesecator/5149 2023-12-03 17:01:28+00:00| seen| https://t.me/redfoxsec/24 2023-12-22 11:44:34+00:00| seen|...
CVE-2023-6345
creationtimestamp| type| source ---|---|--- 2023-11-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1169 2023-11-29 05:29:22+00:00| exploited| https://t.me/thehackernews/4205 2023-11-29 06:23:17+00:00| exploited| https://t.me/KomunitiSiber/1135 2023-11-29 06:36:13+00:00...
CVE-2023-6020
creationtimestamp| type| source ---|---|--- 2023-11-25 12:14:52+00:00| published-proof-of-concept| Telegram/B3MfWlGpx-qQr-PJTpFgE5RGDaIYA5WKuQnODf6UIO8APlw 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-08-23 09:26:17+00:00| seen|...
CVE-2023-46214
creationtimestamp| type| source ---|---|--- 2023-11-19 07:37:50+00:00| published-proof-of-concept| https://t.me/proxybar/1832 2023-11-19 12:58:41+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1418 2023-11-19 14:57:34+00:00| published-proof-of-concept| https://t.me/apsecurity/2...
CVE-2023-43177
creationtimestamp| type| source ---|---|--- 2023-11-17 08:00:07+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/404 2023-11-18 06:12:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9413 2023-12-12 09:30:14+00:00| published-proof-of-concept|...
CVE-2023-48658
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space...
CVE-2023-48659
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...
CVE-2023-48656
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...
CVE-2023-48655
An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters...
CVE-2023-48657
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...
CVE-2023-48656
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...
CVE-2023-48655
An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters...
