CVE-2017-15216

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.81

Description The issue is related to a potential reflected XSS in a quickDelete action used to delete a sighting. This is associated with specific files, including app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js.

Recommendations For versions prior to 2.4.81, update to version 2.4.81 or later to resolve the issue. As a temporary workaround, consider restricting access to the quickDelete action until a patch is applied.