3 matches found
CVE-2023-28606: Improper Neutralization of Input During Web Page Generation
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...
6.1CVSS5.8AI score0.00382EPSS
SaveExploits0References4
CVE-2023-28607: Improper Neutralization of Input During Web Page Generation
js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...
6.1CVSS5.8AI score0.00382EPSS
SaveExploits0References4
CVE-2023-24026: Improper Neutralization of Input During Web Page Generation
In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...
6.1CVSS5.8AI score0.00395EPSS
SaveExploits0References3
20