CVE-2019-11814

NONE EPSS 52.3%
Published May 8, 20197y ago · Modified Jun 22, 20261w ago
Find Similar
Published May 8, 2019 7y ago
Last Modified Jun 22, 2026 1w ago

Description

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot.

Threat Intelligence

EPSS Exploit Probability
52.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
misp-projectmisp* <2.4.107

References 1

  • github.com https://github.com/MISP/MISP/commit/62f15433e42fb92e45bd57dd6fc0c0bf53deb6fc
    PatchThird Party Advisory

Remediation

  • github.com https://github.com/MISP/MISP/commit/62f15433e42fb92e45bd57dd6fc0c0bf53deb6fc
    PatchThird Party Advisory