Unscored CVE-2023-41098 EUVD-2023-45618GHSA-pxq9-3j4q-6ffr

An issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected XSS issue exists via the id parameter upon…

Published Aug 23, 2023 · Updated Oct 3, 2024 · Assigned by mitre

Description

An issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected XSS issue exists via the id parameter upon a dashboard edit.

Advisories 1

WID-SEC-2023-2110 MISP: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Aug 22, 2023

References

https://github.com/MISP/MISP/commit/09fb0cba65eab9341e81f1cbebc2ae10be34a2b7