CVE-2023-28884

CVE-2023-28884: In MISP 2.4.169, the vulnerability resides in app/Lib/Tools/CustomPaginationTool.php, allowing cross-site scripting in the community index. The issue is documented across multiple sources (NVD/OSV/Red Hat) with the impact described as XSS and a base CVSS 3.1 score of 6.1 (Medium)....

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.169. An attacker exploited the...

PT-2023-22031

Name of the Vulnerable Software and Affected Versions MISP version 2.4.169 Description The issue allows for XSS in the community index due to a vulnerability in the CustomPaginationTool.php file. Recommendations For MISP version 2.4.169, update to a version that fixes the issue in the...

CVE-2023-28884

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...

CVE-2023-20963

creationtimestamp| type| source ---|---|--- 2023-03-24 23:47:39+00:00| seen| https://t.me/cibsecurity/60683 2023-06-03 04:34:41+00:00| exploited| Telegram/r9pSH-zaZzJ85yrAwBqJG-jTD9RHKE8OIhFvQLWl5Z4 2023-06-10 08:57:29+00:00| exploited| https://t.me/androidMalware/1912 2023-06-12 11:13:38+00:00|...

CVE-2023-1133

creationtimestamp| type| source ---|---|--- 2023-03-23 14:19:08+00:00| seen| https://t.me/truesecator/4205 2023-03-27 18:20:10+00:00| seen| https://t.me/cibsecurity/60787 2023-06-08 13:56:26+00:00| seen|...

CVE-2023-28432

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:12+00:00| seen| https://t.me/cibsecurity/60525 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-23 16:34:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4019 2023-03-24...

CVE-2023-0386

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:07+00:00| seen| https://t.me/cibsecurity/60523 2023-05-05 03:10:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4290 2023-05-05 12:50:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4296 2023-05-05...

CVE-2023-28434

creationtimestamp| type| source ---|---|--- 2023-03-22 23:35:58+00:00| seen| https://t.me/cibsecurity/60516 2023-03-23 14:52:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4016 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-27...

CVE-2023-28769

creationtimestamp| type| source ---|---|--- 2023-03-21 19:23:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/zyxelmultipledeviceszhttplanrce.rb 2023-06-22 12:15:21+00:00| seen| MISP/1c355568-696d-46a8-b7e7-3022bb8d3143 2025-02-06...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

Design/Logic Flaw

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

Design/Logic Flaw

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-27253

creationtimestamp| type| source ---|---|--- 2023-03-18 01:31:52+00:00| seen| https://t.me/cibsecurity/60279 2023-07-12 18:53:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pfsenseconfigdataexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

PT-2023-21842

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.169 Description The issue allows for XSS via event-graph node tooltips in the js/event-graph.js file. Recommendations For versions prior to 2.4.169, update to version 2.4.169 or later to resolve the issue...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-28606

The CVE-2023-28606 issue affects MISP and stems from the js/event-graph.js component, where tooltips in the event-graph node UI can be exploited to perform XSS. Affected versions are MISP before 2.4.169; remediation is to upgrade to version 2.4.169 or later. The connected sources confirm the vuln...