EUVD-2020-21335

Malware in sbrugna...

CVE-2020-28947

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled...

MISP Cross-Site Scripting Vulnerability (CNVD-2020-66576)

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in the template element index view in MISP 2.4.134. The...

Vulnerability fixed in MISP

CIRCL has fixed a vulnerability in MISP. The vulnerability is located in the handling of templates and allows a malicious party to be able to launch a Cross-Site-Scripting attack XSS attack, potentially executing arbitrary code in the context of the browser. CIRCL has released updates to fix the...

Design/Logic Flaw

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled...