CVE-2019-11812

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...

CVE-2017-13671

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation...

PT-2017-13003

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.79 Description The issue is related to persistent XSS via comments in the app/View/Helper/CommandHelper.php file. It affects users of the same instance, as the comment field is not part of the MISP synchronization...