DOM-Based XSS Vulnerability in MISP Web Application by MISP Technology
CVE-2018-11245

6.1MEDIUM

Key Information:

Vendor: Misp-project
Status: Misp
Vendor: CVE Published:; 18 May 2018

🔔 Create Misp-project Vulnerability Alert

What is CVE-2018-11245?

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the webroot JavaScript file (misp.js) of MISP version 2.4.91. This flaw allows attackers to execute arbitrary JavaScript code within the user's browser, affecting the integrity of the application and potentially compromising user data. Exploitation of this vulnerability can occur due to improper handling of cortex type attributes, making it essential for users to apply recommended security patches promptly.

References

https://github.com/MISP/MISP/commit/5efc07b12f82301a6086f...

https://zigrin.com/advisories/misp-xss-with-cortex-type-a...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 18, 2018
Vulnerability Reserved
May 18, 2018

CVE-2018-11245 Data

JSON