Cross site scripting

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

CVE-2021-36212

CVE-2021-36212 affects MISP prior to version 2.4.146, with stored XSS in the file path app/View/SharingGroups/view.ctp affecting the sharing groups view. The NVD/CVE data show a CVSSv3.1 base score of 6.1 (NETWORK, LOW attack complexity, UI REQUIRED, CHANGED scope; Impact: LOW confidentiality/int...

CVE-2021-36212

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

CVE-2021-36212

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

MISP Cross-Site Script Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in app/View/SharingGroups/view.ctp in versions o...

PT-2021-21177

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.146 Description The issue allows stored XSS in the sharing groups view. This occurs due to a problem in the app/View/SharingGroups/view.ctp file. Recommendations For versions prior to 2.4.146, update to version 2.4.1...

CVE-2021-27904

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

CVE-2021-27904

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

Code injection

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

CVE-2021-27904

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

PT-2021-17658

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.139 Description: An issue was discovered in the implementation of Sharing Groups, where the all org flag sometimes provided view access to unintended actors. This occurred due to a problem in the...