Misp-Project: >> Malware Information Sharing Platform Security Vulnerabilities
An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-06-30
In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-06-30
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
CVSS Score
6.1
EPSS Score
0.002
Published
2023-03-27
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-03-18
js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-03-18
Page 1