Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•9 views

CVE-2024-29858: Incomplete Identification of Uploaded File Variables (PHP)

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

9.8CVSS5.8AI score0.00384EPSS
SaveExploits0References4
Mend
Mend
•added 2022/04/20 12:00 a.m.•7 views

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

6.1CVSS0.00838EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•8 views

CVE-2022-29533: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

6.1CVSS6.3AI score0.00838EPSS
SaveExploits0References8
Rows per page
Query Builder