CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2023/06/30 5:15 p.m.•11 views

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

5.4CVSS7.1AI score

Exploits0References4

Prion•added 2023/06/30 5:15 p.m.•8 views

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

4.9CVSS7.5AI score0.00129EPSS

Exploits3References4Affected Software1

CVE•added 2023/06/30 12:0 a.m.•31 views

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

5.4CVSS5.4AI score0.00129EPSS

Exploits3References4Affected Software1