CVE-2017-16802

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-11-13

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Misp (Misp-project)

References

• https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194