5 matches found
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
6.1CVSS6AI score0.00798EPSS
SaveExploits0References1
Design/Logic Flaw
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
4.3CVSS5.9AI score0.00798EPSS
SaveExploits0References1Affected Software1
CVE-2021-25325
CVE-2021-25325 affects MISP 2.4.136. It enables cross-site scripting via galaxy cluster element values sent to app/View/GalaxyElements/ajax/index.ctp, where reference types may include javascript: URLs. The issue arises from unsanitized input in galaxy elements, enabling an attacker to execute sc...
6.1CVSS5.9AI score0.00798EPSS
SaveExploits0References1Affected Software1
20