CVE-2017-16802

The CVE concerns MISP version 2.4.82 where the function shared ingGroupPopulateOrganisations in app/webroot/js/misp.js is vulnerable to cross-site scripting (XSS). A remote attacker can inject arbitrary script via a specially crafted organisation name added to the list, exposing users to client-s...

CVE-2017-16802

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...

CVE-2014-8517

creationtimestamp| type| source ---|---|--- 2017-11-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43112 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/tnftpsavefile.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2017-14143

creationtimestamp| type| source ---|---|--- 2017-10-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43028 2018-01-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43876 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-15222

creationtimestamp| type| source ---|---|--- 2017-10-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43025 2018-01-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43448 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-12629

creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43009 2018-03-09 07:40:58+00:00| seen| MISP/5aa23875-d0dc-49d6-82a6-d309950d210f 2025-08-01 21:00:04+00:00| published-proof-of-concept|...

CVE-2017-11292

creationtimestamp| type| source ---|---|--- 2017-10-16 15:03:08+00:00| seen| MISP/59e4c923-a6e0-4894-a6a8-994d950d210f 2017-10-16 17:56:56+00:00| exploited| https://t.me/informationsecuritychannel/10023 2017-10-16 19:53:28+00:00| seen| MISP/59e50d7c-e7cc-44f6-9f15-02afac12042b 2017-10-17...

CVE-2017-11826

creationtimestamp| type| source ---|---|--- 2017-10-11 16:30:10+00:00| exploited| https://t.me/informationsecuritychannel/9851 2017-10-12 11:04:08+00:00| exploited| https://t.me/informationsecuritychannel/9892 2017-11-09 20:56:42+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2608...

Cross site scripting

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2017-15216

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2017-15216

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2017-15216

Summary: CVE-2017-15216 is a reflected XSS vulnerability in MISP prior to version 2.4.81. The issue arises in the quickDelete action used to delete a sighting, related to the files app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js. Affected software: MISP before 2...

CVE-2017-15216

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2015-4000

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2022-11-07 22:22:31+00:00| seen|...

CVE-2014-3566

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-03-08 04:13:09+00:00| seen| Telegram/vucuqGbRCztQDBt8wgDth-hLVvGp8dTTlxQcNvjhW5htig 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3309

creationtimestamp| type| source ---|---|--- 2017-10-06 16:06:20+00:00| exploited| https://t.me/canyoupwnme/2393 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:28:24+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971375 2025-02-23 02:10:11+00:00...

CVE-2017-12617

creationtimestamp| type| source ---|---|--- 2017-10-05 13:18:32+00:00| seen| https://t.me/informationsecuritychannel/9627 2017-10-05 21:40:16+00:00| seen| https://t.me/informationsecuritychannel/9655 2017-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42966 2017-10-09...

CVE-2017-14494

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42944 2024-11-14 06:09:54+00:00| seen| MISP/391f93ae-ac9e-4e23-a188-e10f41556b4d...

CVE-2017-1000253

creationtimestamp| type| source ---|---|--- 2017-09-30 14:06:42+00:00| seen| https://t.me/itsecalert/72 2017-11-05 16:10:41+00:00| exploited| https://t.me/canyoupwnme/2583 2024-09-11 16:36:49+00:00| seen| https://t.me/itsecnews/4693 2024-09-20 18:10:03+00:00| seen|...

CVE-2017-11610

creationtimestamp| type| source ---|---|--- 2017-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42779 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/supervisorxmlrpcexec.rb 2020-10-09 14:02:27+00:00|...