Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•1 views

CVE-2024-29858: Incomplete Identification of Uploaded File Variables (PHP)

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

9.8CVSS5.8AI score0.00384EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•5 views

CVE-2022-29533: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

6.1CVSS6.3AI score0.00838EPSS
SaveExploits0References8
Rows per page
Query Builder