Authentication flaw

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

CVE-2017-14337 affects MISP prior to 2.4.80. When CertAuth via X.509 is used together with a non-MISP external user management REST API, and that API returns an empty value for an external user, an unauthenticated user can be granted access as an arbitrary user. Evidence across connected records ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-9805

creationtimestamp| type| source ---|---|--- 2017-09-06 07:05:34+00:00| seen| https://t.me/HackerOne/985 2017-09-06 11:05:58+00:00| exploited| https://t.me/webpwn/148 2017-09-06 11:10:48+00:00| published-proof-of-concept| https://t.me/cybershit/77 2017-09-06 12:56:14+00:00| seen|...

CVE-2017-5070

creationtimestamp| type| source ---|---|--- 2017-09-04 17:48:58+00:00| exploited| https://t.me/informationsecuritychannel/8457 2019-09-25 08:28:15+00:00| seen| MISP/5d8b23ae-50d0-4a09-86da-4dc9950d210f 2020-10-09 14:30:50+00:00| seen| MISP/bbad3705-75de-41f7-980c-0e90136909de 2022-06-07...

CVE-2017-8570

creationtimestamp| type| source ---|---|--- 2017-09-02 13:40:38+00:00| seen| https://t.me/informationsecuritychannel/8407 2018-02-27 14:00:30+00:00| seen| MISP/5a955d28-c2e8-4016-beaa-41ed950d210f 2018-03-20 06:51:20+00:00| seen| MISP/5aafa3d9-cf3c-49fe-9c4e-2e52ac100a5a 2018-03-22 14:09:47+00:00...

CVE-2017-1000117

creationtimestamp| type| source ---|---|--- 2017-08-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42599 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitsubmodulecommandexec.rb 2018-11-19 16:33:23+00:00|...

CVE-2017-1130

creationtimestamp| type| source ---|---|--- 2017-08-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42604 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ibmlotusnotes2.rb 2025-02-06 03:13:43+00:00| seen|...

Design/Logic Flaw

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation...

CVE-2017-13671

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation...

CVE-2017-13671

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation...

CVE-2017-13671

CVE-2017-13671 affects the MISP application prior to version 2.4.79, in the file app/View/Helper/CommandHelper.php . The vulnerability is a persistent cross-site scripting (XSS) flaw via the comments field. The impact is limited to users on the same instance because the comment field is not inclu...

CVE-2017-13671

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation...

CVE-2016-7892

creationtimestamp| type| source ---|---|--- 2017-08-18 09:41:15+00:00| seen| MISP/5996b58c-e8b8-4e65-aaa4-638eac12042b 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:29:00+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971416 2025-02-14...

CVE-2017-6327

creationtimestamp| type| source ---|---|--- 2017-08-11 17:17:33+00:00| seen| https://t.me/informationsecuritychannel/7579 2017-08-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42519 2017-08-21 07:07:13+00:00| seen| https://t.me/HackerOne/930 2020-10-20 15:57:21+00:00| seen|...

CVE-2017-12477

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42957 2017-10-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43031 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-12478

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42958 2017-10-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43030 2018-10-05 21:28:59+00:00| seen|...

CVE-2017-7442

creationtimestamp| type| source ---|---|--- 2017-08-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42418 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/nitroreaderjsapi.rb 2025-02-06 03:13:43+00:00...