CVE-2017-16802

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added

published November 13, 2017

CVSS
—
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00600 · 47.8th percentile
Published
2017-11-13T16:00Z
EPSS history
Timeline
  • 13 NOV 16:00Z
    In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added
    cvelistv5