Lucene search
+L

4 matches found

Prion
Prion
added 2023/06/30 5:15 p.m.17 views

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

4.9CVSS7.5AI score0.00502EPSS
SaveExploits3References4Affected Software1
CVE
CVE
added 2023/06/30 12:0 a.m.49 views

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

5.4CVSS5.4AI score0.00502EPSS
SaveExploits3References4Affected Software1
OSV
OSV
added 2023/06/30 12:0 a.m.18 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

7.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/06/30 12:0 a.m.21 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.7AI score0.00502EPSS
SaveExploits3References4
Rows per page
Query Builder