5480 matches found
Vulnerabilities fixed in MISP
The developers of MISP have fixed vulnerabilities in MISP. The vulnerabilities marked CVE-2023-24070, CVE-2023-24026 and CVE-2023-24027 allow a malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser with...
CVE-2023-0266
creationtimestamp| type| source ---|---|--- 2023-01-30 16:37:10+00:00| seen| https://t.me/cibsecurity/57157 2023-03-30 18:17:31+00:00| seen| https://t.me/truesecator/4237 2023-05-05 12:22:21+00:00| exploited| https://t.me/informationsecuritychannel/49867 2023-05-05 21:32:46+00:00| exploited|...
CVE-2022-45770
creationtimestamp| type| source ---|---|--- 2023-01-27 14:46:31+00:00| published-proof-of-concept| https://t.me/xakepru/13536 2023-02-03 19:42:06+00:00| published-proof-of-concept| https://t.me/arvinclub/6418 2023-02-03 20:27:51+00:00| published-proof-of-concept| https://t.me/breachdetector/19463...
CVE-2022-27228
creationtimestamp| type| source ---|---|--- 2023-01-27 07:46:47+00:00| seen| https://t.me/codebysec/7060 2023-03-08 00:29:52+00:00| exploited| https://t.me/informationsecuritychannel/49692 2023-03-16 11:15:04+00:00| seen| MISP/dc951084-82f5-430e-b8b2-513843c90639 2023-06-21 13:09:38+00:00| seen|...
CVE-2022-31711
creationtimestamp| type| source ---|---|--- 2023-01-25 13:47:26+00:00| seen| https://t.me/truesecator/3983 2023-02-02 01:33:27+00:00| published-proof-of-concept| https://t.me/crackcodes/2486 2023-02-05 18:30:23+00:00| published-proof-of-concept| https://t.me/MrVGunz/683 2023-09-08 21:32:40+00:00|...
CVE-2022-31704
creationtimestamp| type| source ---|---|--- 2023-01-25 08:13:57+00:00| seen| https://t.me/thehackernews/2984 2023-01-25 13:14:27+00:00| seen| https://t.me/ctinow/89091 2023-01-25 13:47:26+00:00| seen| https://t.me/truesecator/3983 2023-01-26 04:00:00+00:00| seen|...
CVE-2022-31706
creationtimestamp| type| source ---|---|--- 2023-01-25 08:13:57+00:00| seen| https://t.me/thehackernews/2984 2023-01-25 13:14:27+00:00| seen| https://t.me/ctinow/89091 2023-01-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=955 2023-01-31 20:47:42+00:00| seen|...
CVE-2023-24070
app/View/AuthKeys/authkeydisplay.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field...
Design/Logic Flaw
app/View/AuthKeys/authkeydisplay.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field...
PT-2023-19388
Name of the Vulnerable Software and Affected Versions MISP versions 2.4.167 and earlier Description The issue is related to an XSS in authkey add via a Referer field in the app/View/AuthKeys/authkey display.ctp file. Recommendations For MISP versions 2.4.167 and earlier, as a temporary workaround...
CVE-2023-24070
app/View/AuthKeys/authkeydisplay.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field...
MISP 跨站脚本漏洞
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.167 and prior versions. An attacker...
CVE-2023-24070
app/View/AuthKeys/authkeydisplay.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field...
CVE-2023-24070
Summary : CVE-2023-24070 concerns MISP
CVE-2023-24028
In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...
CVE-2023-24026
In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...
CVE-2023-24027
In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...
Cross site scripting
In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...