Misp-Project: >> Misp Security Vulnerabilities
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-11-17
An issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected XSS issue exists via the id parameter upon a dashboard edit.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-08-23
MISP 2.4.174 allows XSS in app/View/Events/index.ctp.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-08-10
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-06-30
In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.
CVSS Score
5.4
EPSS Score
0.005
Published
2023-06-30
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-03-27
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-03-18