CVE-2018-11245

app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-05-18

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Misp (Misp-project)

References

• https://github.com/MISP/MISP/commit/5efc07b12f82301a6086fd3433fedd69fe7119d3
• https://zigrin.com/advisories/misp-xss-with-cortex-type-attributes/