CVE-2023-28324

creationtimestamp| type| source ---|---|--- 2023-07-01 07:15:53+00:00| seen| https://t.me/cibsecurity/65845 2024-09-16 14:34:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8540 2024-09-18 17:40:04+00:00| seen| https://t.me/truesecator/6220 2024-09-22 11:11:47+00:00| seen|...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

Information disclosure

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

PT-2023-25898

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.172 Description The issue arises from the improper sanitization of the title for layout in Correlations, CorrelationExclusions, and Layouts. This could potentially lead to security issues, although specific details...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

CVE-2023-37306

CVE-2023-37306 pertains to MISP 2.4.172, where server sync mishandles certificate file extensions, causing information disclosure through error messages. The affected component is MISP 2.4.172; root cause is improper handling of certificate extensions during server synchronization. Impact is info...

CVE-2021-25372

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:43+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971842 2025-02-14 21:08:32+00:00| seen| Telegram/pNcH1hEomyEtVJuTE5MpGKbrOFjsQ4TgdHH4vA6bfctz-U42...

CVE-2021-25487

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:47+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971847 2025-02-14 21:08:32+00:00| seen| Telegram/MtdIw5pZ4MJSq9Y1PobwvQlKiBZmrawIx1jJFkL2naTTi3Gl...

CVE-2021-25489

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:46+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971846 2025-02-14 21:08:32+00:00| seen| Telegram/n5CrZtNloi9lGLONfjAThMtpupYWH9TjR2BIidxI6D1rJVMm...

CVE-2021-25394

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-07-03 13:55:50+00:00| exploited| https://t.me/KomunitiSiber/437 2023-07-03 14:02:17+00:00| exploited| Telegram/fuuBsVYjurZRlHbZWSyUxfq8L5euBIwJMZ7mQsB877Q 2024-12-24...

CVE-2019-20500

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:47+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971848 2025-02-23 02:10:43+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...