CVE-2021-37742

app/View/Elements/GalaxyClusters/viewrelationtree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships...

CVE-2021-37743

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

Cross site scripting

app/View/Elements/GalaxyClusters/viewrelationtree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships...

Cross site scripting

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

CVE-2021-37743

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

CVE-2021-37743

CVE-2021-37743 affects MISP 2.4.147. The vulnerability is a Stored XSS in the view path app/View/GalaxyElements/ajax/index.ctp when rendering galaxy cluster elements in JSON format. The underlying issue is that user-supplied data is reflected in JSON output without proper sanitization, enabling s...

CVE-2021-36742

creationtimestamp| type| source ---|---|--- 2021-07-30 00:14:37+00:00| seen| https://t.me/cibsecurity/26582 2021-08-13 05:19:44+00:00| exploited| https://t.me/cKure/6595 2021-08-13 18:53:59+00:00| exploited| https://t.me/truesecator/2002 2021-11-08 08:58:20+00:00| seen|...

CVE-2021-36741

creationtimestamp| type| source ---|---|--- 2021-07-30 00:14:36+00:00| seen| https://t.me/cibsecurity/26581 2021-08-13 05:19:44+00:00| exploited| https://t.me/cKure/6595 2021-08-13 18:53:59+00:00| exploited| https://t.me/truesecator/2002 2021-11-08 08:58:20+00:00| seen|...

CVE-2021-37742

app/View/Elements/GalaxyClusters/viewrelationtree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships...

PT-2021-21856 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.147 Description: The issue allows Stored XSS when viewing galaxy cluster relationships. This occurs in the app/View/Elements/GalaxyClusters/view relation tree.ctp file. Recommendations: For MISP version 2.4.147, consider...

CVE-2021-37742

Summary: CVE-2021-37742 affects MISP 2.4.147 with a Stored XSS in the view file app/View/Elements/GalaxyClusters/view_relation_tree.ctp when viewing galaxy cluster relationships. The issue originates from that view template; exploitation could occur in the user’s browser when rendering the affect...

CVE-2021-29449

creationtimestamp| type| source ---|---|--- 2021-07-29 16:46:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/piholeremovecommandslpe.rb 2021-09-21 04:42:01+00:00| seen| https://t.me/pwnwikizhchannel/807 2025-02-06 03:13:45+00:00| seen|...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. A malicious party can exploit the exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application is visited. MISP has released updates ...

CVE-2021-36380

creationtimestamp| type| source ---|---|--- 2021-07-27 16:20:40+00:00| seen| https://t.me/truesecator/1944 2024-02-03 18:24:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3935 2024-03-05 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-06...

CVE-2021-30807

creationtimestamp| type| source ---|---|--- 2021-07-26 17:53:35+00:00| exploited| https://t.me/alexmakus/4195 2021-07-27 00:21:42+00:00| seen| https://t.me/ctinow/37557 2021-07-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=621 2021-07-27 10:58:30+00:00| exploited|...

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

Cross site scripting

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

CVE-2021-37534

The CVE-2021-37534 entry concerns MISP 2.4.146 where a Stored XSS flaw exists in app/View/GalaxyClusters/add.ctp when forking a galaxy cluster. Affected component is the Galaxy Clusters feature; the root cause is an XSS condition that can allow injected script to run in a victim's browser. Impact...