PT-2023-19367

CVE-2023-24026

·

Publicado

2023-01-20

·

Atualizado

2023-01-27

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions MISP version 2.4.167
Description The issue is related to an XSS vulnerability in the event-graph preview payload, specifically in the app/webroot/js/event-graph.js file.
Recommendations For MISP version 2.4.167, consider disabling the event-graph preview feature until a patch is available to prevent potential exploitation of the XSS vulnerability.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2023-24026
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com