Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Misp-project
Misp

Misp-project Misp vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mispAn issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a...CVE-2024-256749.8 CriticalFebruary 9, 2024
misp-project mispapp/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.CVE-2023-509189.8 CriticalDecember 15, 2023
misp-project mispapp/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.CVE-2023-499266.1 MediumDecember 3, 2023
misp-project mispAn issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles...CVE-2023-486599.8 CriticalNovember 17, 2023
misp-project mispAn issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam...CVE-2023-486589.8 CriticalNovember 17, 2023
misp-project mispAn issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.CVE-2023-486579.8 CriticalNovember 17, 2023
misp-project mispAn issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.CVE-2023-486569.8 CriticalNovember 17, 2023
misp-project mispAn issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php...CVE-2023-486559.8 CriticalNovember 17, 2023
misp-project mispAn issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected...CVE-2023-410986.1 MediumAugust 23, 2023
misp-project mispMISP 2.4174 allows XSS in app/View/Events/index.ctp.CVE-2023-402246.1 MediumAugust 10, 2023
misp-project mispIn MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations,...CVE-2023-373075.4 MediumJune 30, 2023
misp-project mispMISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can...CVE-2023-373067.5 HighJune 30, 2023
misp-project mispIn MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.CVE-2023-288846.1 MediumMarch 27, 2023
misp-project mispjs/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.CVE-2023-286076.1 MediumMarch 18, 2023
misp-project mispjs/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.CVE-2023-286066.1 MediumMarch 18, 2023
misp-project mispMISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model...CVE-2022-483299.8 CriticalFebruary 20, 2023
misp-project mispapp/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles...CVE-2022-483289.8 CriticalFebruary 20, 2023
misp-project mispapp/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a...CVE-2023-240706.1 MediumJanuary 23, 2023
misp-project mispIn MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the...CVE-2023-240289.8 CriticalJanuary 20, 2023
misp-project mispIn MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.CVE-2023-240276.1 MediumJanuary 20, 2023
misp-project mispIn MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph...CVE-2023-240266.1 MediumJanuary 20, 2023
misp-project mispIn MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates...CVE-2022-479286.1 MediumDecember 22, 2022
misp-project mispapp/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names...CVE-2022-427244.3 MediumOctober 10, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can...CVE-2022-295347.5 HighApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. There is XSS in app/Controller...CVE-2022-295336.1 MediumApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one...CVE-2022-295324.8 MediumApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag...CVE-2022-295315.4 MediumApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.CVE-2022-295305.4 MediumApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.CVE-2022-295295.4 MediumApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.CVE-2022-295289.8 CriticalApril 20, 2022
misp-project mispAn issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File...CVE-2022-272437.8 HighMarch 18, 2022
misp-project mispAn issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS...CVE-2022-272444.8 MediumMarch 18, 2022
misp-project mispAn issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict...CVE-2022-272458.8 HighMarch 18, 2022
misp-project mispAn issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is...CVE-2022-272466.1 MediumMarch 18, 2022
misp-project mispIn MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used...CVE-2021-413269.8 CriticalSeptember 17, 2021
misp-project mispMISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php ...CVE-2021-393029.8 CriticalAugust 19, 2021
misp-project mispapp/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy...CVE-2021-377435.4 MediumJuly 30, 2021
misp-project mispapp/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when...CVE-2021-377425.4 MediumJuly 30, 2021
misp-project mispapp/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.CVE-2021-375345.4 MediumJuly 26, 2021
misp-project mispapp/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view.CVE-2021-362126.1 MediumJuly 7, 2021
misp-project mispapp/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not...CVE-2021-355029.8 CriticalJune 25, 2021
misp-project mispIn app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to...CVE-2021-317807.5 HighApril 23, 2021
misp-project mispAn issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the...CVE-2021-279045.5 MediumMarch 2, 2021
misp-project mispA cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller...CVE-2020-240856.1 MediumJanuary 20, 2021
misp-project mispMISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage...CVE-2021-31846.1 MediumJanuary 19, 2021
misp-project mispThe default setting of MISP 2.4.136 did not enable the requirements (aka...CVE-2021-253239.1 CriticalJanuary 19, 2021
misp-project mispMISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View...CVE-2021-253246.1 MediumJanuary 19, 2021
misp-project mispMISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp....CVE-2021-253256.1 MediumJanuary 19, 2021
misp-project mispapp/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via...CVE-2020-295726.1 MediumDecember 5, 2020
misp-project mispMISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php...CVE-2020-290069.8 CriticalNovember 24, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open