Skip to content
OpenAdvisories

Product · MISP

bsimvis

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    MISP BSimVis stored cross-site scripting in tag and cluster rendering paths via unescaped tag metadata and UI labels

    A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, HTML attributes, inli…