CVE-2019-11812

NONE EPSS 52.3%
Published May 8, 20197y ago · Modified Jun 22, 20261w ago
Find Similar
Published May 8, 2019 7y ago
Last Modified Jun 22, 2026 1w ago

Description

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.

Threat Intelligence

EPSS Exploit Probability
52.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
misp-projectmisp* <2.4.107

References 1

  • github.com https://github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff
    PatchThird Party Advisory

Remediation

  • github.com https://github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff
    PatchThird Party Advisory