CVE-2021-36212

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

CVE-2021-36212: Improper Neutralization of Input During Web Page Generation

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

PT-2021-21177

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.146 Description The issue allows stored XSS in the sharing groups view. This occurs due to a problem in the app/View/SharingGroups/view.ctp file. Recommendations For versions prior to 2.4.146, update to version 2.4.1...

CVE-2021-25324

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

PT-2021-16520

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.136 Description: The issue is related to Stored XSS in the galaxy cluster view. This occurs via a cluster name to the app/View/GalaxyClusters/view.ctp file. Recommendations: For MISP version 2.4.136, consider restricting acce...

CVE-2021-25324: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

CVE-2020-8893: Undefined Security Weakness

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

CVE-2020-8893

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

CVE-2020-8893

CVE-2020-8893 affects MISP prior to 2.4.121. The issue is in the Galaxy view (file: app/View/Galaxies/view.ctp) where a search string was not properly sanitized, enabling improper handling of input. Impact is described in the sources as a vulnerability in the Galaxy search functionality; explicit...