PT-2023-19368 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue allows for XSS via a network history name in the app/webroot/js/action table.js file. Recommendations: For MISP version 2.4.167, consider disabling the action table.js script until a patch is...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-24026

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

CVE-2023-24026

CVE-2023-24026 affects MISP 2.4.167, specifically the file app/webroot/js/event-graph.js where an event-graph preview payload enables a Cross-Site Scripting (XSS) vulnerability. The root cause is an XSS in the event-graph preview flow, with the vulnerability described across multiple feeds (NVD, ...

CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-24026

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

CVE-2023-24027

CVE-2023-24027 affects MISP 2.4.167 with an XSS issue in app/webroot/js/action_table.js triggered via a network history name. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base score 6.1 (Medium). It requires user interaction and has network attack vector; impact concerns c...

CVE-2023-24026

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.167. An attacker exploits...

CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

PT-2023-19369 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue concerns incorrect access control in the ACLComponent.php file for the decaying import function. This affects the app/Controller/Component/ACLComponent.php component. Recommendations: For MISP versi...

CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

CVE-2023-24028

CVE-2023-24028 affects MISP 2.4.167 where the decaying import function in app/Controller/Component/ACLComponent.php has incorrect access control. The CVSS 3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges, and no user interaction; impact to confidentiality, integrity, and...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-22809

creationtimestamp| type| source ---|---|--- 2023-01-18 20:21:07+00:00| seen| https://t.me/cibsecurity/56682 2023-01-19 14:49:11+00:00| seen| https://t.me/proxybar/1303 2023-01-19 22:34:18+00:00| published-proof-of-concept| https://t.me/crackcodes/2324 2023-01-21 01:03:31+00:00|...

CVE-2022-23521

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:10+00:00| seen| MISP/eab08996-dae5-4549-af05-7d51a85fe0cc 2023-01-19 15:21:31+00:00| published-proof-of-concept| https://t.me/crackcodes/2317 2023-01-22 13:04:27+00:00| seen...

CVE-2022-41903

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:09+00:00| seen| MISP/81745fb9-5708-474a-970d-c009efdc14a7 2023-01-19 14:59:30+00:00| seen| https://t.me/ctinow/87892 2023-01-19 15:21:31+00:00| published-proof-of-concept|...

CVE-2023-21887

creationtimestamp| type| source ---|---|--- 2023-01-18 02:26:32+00:00| seen| https://t.me/cibsecurity/56642 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993 2024-03-12 11:57:05+00:00| exploited| https://t.me/theninjaway1337/1421 2024-12-19 13:09:26+00:00| seen...

CVE-2023-0179

creationtimestamp| type| source ---|---|--- 2023-01-17 13:25:30+00:00| seen| https://t.me/sysodmins/16917 2023-01-19 15:21:31+00:00| published-proof-of-concept| https://t.me/crackcodes/2317 2023-01-21 14:20:39+00:00| published-proof-of-concept| https://t.me/crackcodes/2358 2023-01-21...