CVE-2017-7215 Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4....
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| misp project misp | <= 2.4.68 | No fix listed |
References
- www.fortiguard.com third-party-advisory vdb-entry
- 96997 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- www.misp.software release-notes vendor-advisory
- www.misp.software release-notes vendor-advisory