Cross-Site Scripting Vulnerability in MISP by MISP Project
CVE-2018-8948

6.1MEDIUM

Key Information:

Vendor

Misp-project

Status
Misp
Vendor
CVE Published:
23 March 2018

What is CVE-2018-8948?

In MISP versions prior to 2.4.89, there are multiple vulnerabilities related to Cross-Site Scripting (XSS) in the resolved_attributes.ctp file. Attackers can exploit these vulnerabilities via a malicious MISP module, potentially allowing unauthorized access to sensitive information or manipulation of site content.

References

https://github.com/MISP/MISP/commit/01924cd948dbceb8391be...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.