Lucene search
+L

12 matches found

NVD
NVD
•added 2024/12/04 9:15 p.m.•39 views

CVE-2024-54674

app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...

6.1CVSS0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•7 views

PT-2024-36400

Name of the Vulnerable Software and Affected Versions MISP versions 2.5.2 and earlier Description The issue is related to stored Cross Site Scripting XSS in the MISP Galaxy Cluster Export Function. This occurs when exporting custom clusters into the misp-galaxy format. The file...

6.1CVSS0.00239EPSS
SaveExploits0References8
NVD
NVD
•added 2021/07/26 2:15 p.m.•24 views

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

5.4CVSS0.00509EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/26 2:15 p.m.•26 views

Cross site scripting

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

3.5CVSS5.2AI score0.00509EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/26 1:16 p.m.•33 views

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

5.4AI score0.00509EPSS
SaveExploits0References1
Mend
Mend
•added 2021/07/26 1:16 p.m.•2 views

CVE-2021-37534

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

5.4CVSS0.00509EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/26 12:00 a.m.•7 views

CVE-2021-37534: Improper Neutralization of Input During Web Page Generation

app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...

5.4CVSS5.7AI score0.00509EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/07/26 12:00 a.m.•1 views

PT-2021-21696

Name of the Vulnerable Software and Affected Versions MISP version 2.4.146 Description The issue allows Stored XSS when forking a galaxy cluster. This occurs in the app/View/GalaxyClusters/add.ctp file. Recommendations For MISP version 2.4.146, update to a version that fixes the Stored XSS issue ...

5.4CVSS0.00509EPSS
SaveExploits0References5
Prion
Prion
•added 2021/01/19 4:15 p.m.•25 views

Cross site scripting

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

4.3CVSS5.8AI score0.00801EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/01/19 3:30 p.m.•2 views

CVE-2021-25324

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

6.1CVSS0.00801EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•3 views

PT-2021-16520

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.136 Description: The issue is related to Stored XSS in the galaxy cluster view. This occurs via a cluster name to the app/View/GalaxyClusters/view.ctp file. Recommendations: For MISP version 2.4.136, consider restricting acce...

6.1CVSS0.00801EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/19 12:00 a.m.•6 views

CVE-2021-25324: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

6.1CVSS5.8AI score0.00801EPSS
SaveExploits0References4
Rows per page
Query Builder