PT-2020-17069
CVE-2020-28947
·
تاريخ النشر
2020-11-19
·
تاريخ التحديث
2020-11-30
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MISP version 2.4.134
Description
The issue exists in the template element index view due to the mishandling of the
id parameter, leading to a cross-site scripting (XSS) problem.Recommendations
For MISP version 2.4.134, consider restricting access to the template element index view until a patch is available, and avoid using the
id parameter in this view to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾