CVE-2019-14286

NONE EPSS 52.3%
Published Jul 27, 20196y ago · Modified Jun 22, 20261w ago
Find Similar
Published Jul 27, 2019 6y ago
Last Modified Jun 22, 2026 1w ago

Description

In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability.

Threat Intelligence

EPSS Exploit Probability
52.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
misp-projectmisp2.4.111any

References 1

  • github.com https://github.com/MISP/MISP/commit/26bedd8a68c32a2f14460a8eac2a9fb09923392b
    PatchThird Party Advisory

Remediation

  • github.com https://github.com/MISP/MISP/commit/26bedd8a68c32a2f14460a8eac2a9fb09923392b
    PatchThird Party Advisory