PT-2023-19367
CVE-2023-24026
·
تاريخ النشر
2023-01-20
·
تاريخ التحديث
2023-01-27
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MISP version 2.4.167
Description
The issue is related to an XSS vulnerability in the event-graph preview payload, specifically in the app/webroot/js/event-graph.js file.
Recommendations
For MISP version 2.4.167, consider disabling the event-graph preview feature until a patch is available to prevent potential exploitation of the XSS vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾