CVE-2017-13671

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-08-24

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Misp (Misp-project)

References

• http://www.securityfocus.com/bid/100533
• https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa