Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...

CVE-2021-26414

creationtimestamp| type| source ---|---|--- 2022-12-25 23:13:07+00:00| seen| https://t.me/canyoupwnme/6833 2024-11-14 06:09:15+00:00| seen| MISP/b48441df-40dd-486b-b473-e04de6347bff...

CVE-2022-40005

creationtimestamp| type| source ---|---|--- 2022-12-25 22:40:12+00:00| seen| https://t.me/cibsecurity/55310 2023-06-29 12:17:33+00:00| seen| MISP/23306019-6785-40e9-a0d8-c5f4a60998d9 2025-01-23 18:41:16+00:00| exploited| https://t.me/truesecator/6651 2025-04-14 18:54:13+00:00|...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

Design/Logic Flaw

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

Summary: CVE-2022-47928 is a cross-site scripting (XSS) vulnerability in MISP prior to 2.4.167, caused by an XSS flaw in the template file uploads feature (app/View/Templates/upload_file.ctp). The issue is documented across multiple sources (NVD, Red Hat, OSV, etc.) and is specifically tied to th...

PT-2022-28090

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.167 Description The issue is related to Cross-Site Scripting XSS in the template file uploads, specifically in the app/View/Templates/upload file.ctp file. This allows for malicious script execution. Recommendations...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2018-0125

creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...

CVE-2018-0147

creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...

CVE-2022-36534

creationtimestamp| type| source ---|---|--- 2022-12-14 13:08:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/syncoverylinuxrce202236534.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:47+00:00|...

CVE-2022-36536

creationtimestamp| type| source ---|---|--- 2022-12-14 12:04:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/syncoverylinuxtokencve202236536.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2022-44698

creationtimestamp| type| source ---|---|--- 2022-12-13 21:41:07+00:00| exploited| https://t.me/ctinow/81295 2022-12-13 22:28:07+00:00| seen| https://t.me/cibsecurity/54463 2022-12-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=932 2022-12-15 08:37:15+00:00| seen|...

CVE-2022-42856

creationtimestamp| type| source ---|---|--- 2022-12-13 19:34:15+00:00| exploited| https://t.me/alexmakus/4871 2022-12-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=933 2022-12-14 08:28:58+00:00| seen| https://t.me/itsecnews/1920 2022-12-14 15:50:08+00:00| exploited|...

CVE-2020-25736

creationtimestamp| type| source ---|---|--- 2022-12-13 18:16:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/acronistrueimagexpcprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:26+00:00|...

CVE-2022-27518

creationtimestamp| type| source ---|---|--- 2022-12-13 13:44:48+00:00| seen| https://www.cert.at/de/warnungen/2022/12/kritische-sicherheitslucke-in-citrix-adc-und-citrix-gateway 2022-12-13 14:51:44+00:00| exploited| https://t.me/ctinow/81148 2022-12-13 16:11:54+00:00| exploited|...

CVE-2022-31199

creationtimestamp| type| source ---|---|--- 2022-12-12 10:33:31+00:00| exploited| https://t.me/itsecnews/1908 2022-12-19 13:27:18+00:00| seen| MISP/a07cce34-4146-472f-92d1-e5334d2158c6 2023-07-07 11:36:40+00:00| seen| https://t.me/KomunitiSiber/455 2023-07-07 11:51:07+00:00| seen|...

CVE-2022-46770

creationtimestamp| type| source ---|---|--- 2022-12-07 22:11:53+00:00| seen| https://t.me/cibsecurity/54139 2023-01-17 23:17:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/mirageos/qubesmiragefirewalldos.rb 2025-02-06 03:13:45+00:00| seen|...