CVE-2023-28884

CVE-2023-28884: In MISP 2.4.169, the vulnerability resides in app/Lib/Tools/CustomPaginationTool.php, allowing cross-site scripting in the community index. The issue is documented across multiple sources (NVD/OSV/Red Hat) with the impact described as XSS and a base CVSS 3.1 score of 6.1 (Medium)....

PT-2023-22031

Name of the Vulnerable Software and Affected Versions MISP version 2.4.169 Description The issue allows for XSS in the community index due to a vulnerability in the CustomPaginationTool.php file. Recommendations For MISP version 2.4.169, update to a version that fixes the issue in the...

CVE-2023-28884

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.169. An attacker exploited the...

CVE-2023-28884

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...

CVE-2023-20963

creationtimestamp| type| source ---|---|--- 2023-03-24 23:47:39+00:00| seen| https://t.me/cibsecurity/60683 2023-06-03 04:34:41+00:00| exploited| Telegram/r9pSH-zaZzJ85yrAwBqJG-jTD9RHKE8OIhFvQLWl5Z4 2023-06-10 08:57:29+00:00| exploited| https://t.me/androidMalware/1912 2023-06-12 11:13:38+00:00|...

CVE-2023-1133

creationtimestamp| type| source ---|---|--- 2023-03-23 14:19:08+00:00| seen| https://t.me/truesecator/4205 2023-03-27 18:20:10+00:00| seen| https://t.me/cibsecurity/60787 2023-06-08 13:56:26+00:00| seen|...

CVE-2023-28432

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:12+00:00| seen| https://t.me/cibsecurity/60525 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-23 16:34:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4019 2023-03-24...

CVE-2023-0386

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:07+00:00| seen| https://t.me/cibsecurity/60523 2023-05-05 03:10:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4290 2023-05-05 12:50:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4296 2023-05-05...

CVE-2023-28434

creationtimestamp| type| source ---|---|--- 2023-03-22 23:35:58+00:00| seen| https://t.me/cibsecurity/60516 2023-03-23 14:52:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4016 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-27...

CVE-2023-28769

creationtimestamp| type| source ---|---|--- 2023-03-21 19:23:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/zyxelmultipledeviceszhttplanrce.rb 2023-06-22 12:15:21+00:00| seen| MISP/1c355568-696d-46a8-b7e7-3022bb8d3143 2025-02-06...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

Design/Logic Flaw

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

Design/Logic Flaw

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2023-27253

creationtimestamp| type| source ---|---|--- 2023-03-18 01:31:52+00:00| seen| https://t.me/cibsecurity/60279 2023-07-12 18:53:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pfsenseconfigdataexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2023-28607

CVE-2023-28607 affects the MISP project. The issue is a cross-site scripting (XSS) vulnerability in the JavaScript file js/event-graph.js (in MISP) that is exploitable via the event-graph relationship tooltip. Affected versions are MISP prior to 2.4.169; upgrading to 2.4.169 or later is recommend...

PT-2023-21843

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.169 Description The issue allows for XSS via the event-graph relationship tooltip in the js/event-graph.js file. Recommendations For versions prior to 2.4.169, update to version 2.4.169 or later to resolve the issue...