12 matches found
CVE-2024-54674
app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...
PT-2024-36400
Name of the Vulnerable Software and Affected Versions MISP versions 2.5.2 and earlier Description The issue is related to stored Cross Site Scripting XSS in the MISP Galaxy Cluster Export Function. This occurs when exporting custom clusters into the misp-galaxy format. The file...
CVE-2021-37534
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...
Cross site scripting
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...
CVE-2021-37534
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...
CVE-2021-37534
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...
CVE-2021-37534: Improper Neutralization of Input During Web Page Generation
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster...
PT-2021-21696
Name of the Vulnerable Software and Affected Versions MISP version 2.4.146 Description The issue allows Stored XSS when forking a galaxy cluster. This occurs in the app/View/GalaxyClusters/add.ctp file. Recommendations For MISP version 2.4.146, update to a version that fixes the Stored XSS issue ...
Cross site scripting
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
CVE-2021-25324
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
PT-2021-16520
Name of the Vulnerable Software and Affected Versions: MISP version 2.4.136 Description: The issue is related to Stored XSS in the galaxy cluster view. This occurs via a cluster name to the app/View/GalaxyClusters/view.ctp file. Recommendations: For MISP version 2.4.136, consider restricting acce...
CVE-2021-25324: Improper Neutralization of Input During Web Page Generation
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...