Lucene search
+L

4 matches found

Prion
Prion
added 2023/06/30 5:15 p.m.19 views

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

4.9CVSS7.5AI score0.00502EPSS
SaveExploits3References4Affected Software1
CVE
CVE
added 2023/06/30 12:00 a.m.51 views

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

5.4CVSS5.4AI score0.00502EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2023/06/30 12:00 a.m.23 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.7AI score0.00502EPSS
SaveExploits3References4
OSV
OSV
added 2023/06/30 12:00 a.m.20 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

7.1AI score
SaveExploits0References6
Rows per page
Query Builder