5395 matches found
CVE-2024-58130
The CVE-2024-58130 affects MISP prior to 2.4.193 in RestResponseComponent.php where non-JSON REST responses are not sanitized. This could allow processing of non-JSON outputs through REST endpoints. Remediation: upgrade to MISP 2.4.193 (or later).
CVE-2024-58129
CVE-2024-58129 affects MISP prior to version 2.4.193. The issue allows attackers with admin privileges to set menu_custom_right_link_html through the UI (not the CLI), enabling cross-site scripting on every page. The risk description in the connected documents confirms XSS across pages due to thi...
CVE-2024-58128
In MISP before 2.4.193, menucustomrightlink parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks via a global menu link...
CVE-2024-58128
In MISP before 2.4.193, menucustomrightlink parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks via a global menu link...
CVE-2024-58129
In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...
CVE-2024-58128
CVE-2024-58128 (MISP) affects MISP prior to 2.4.193. The issue allows attackers with admin privileges to perform cross-site scripting (XSS) through the menu_custom_right_link parameter set via the UI (no CLI). The root cause is an insufficiency in input validation/handling of that parameter, enab...
CVE-2024-58128
In MISP before 2.4.193, menucustomrightlink parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks via a global menu link...
CVE-2024-58129
In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...
CVE-2024-58130
In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses...
CVE-2024-58129
In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...
CVE-2025-25036
creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8428 2025-03-21 22:39:52+00:00| seen| https://t.me/cvedetector/20836 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2025-25035
creationtimestamp| type| source ---|---|--- 2025-03-21 19:19:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8411 2025-03-21 22:39:54+00:00| seen| https://t.me/cvedetector/20839 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2024-53348
creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8351 2025-03-21 18:29:03+00:00| seen| https://t.me/cvedetector/20816 2025-03-24 18:23:00+00:00| published-proof-of-concept|...
CVE-2024-8101
creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8196 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2023-2359
creationtimestamp| type| source ---|---|--- 2025-03-19 15:49:02+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...
CVE-2024-3809
creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:49+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...
CVE-2024-3806
creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:34+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...
CVE-2025-30154
creationtimestamp| type| source ---|---|--- 2025-03-19 15:45:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114189869676629359 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 17:21:01+00:00| published-proof-of-concept|...
CVE-2024-44228
creationtimestamp| type| source ---|---|--- 2025-03-13 17:45:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7448 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:29+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...