CVE-2017-16802 | BDVDB-2026-92829 Detail

Description#

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194

Exploit#

No public exploit known

History#

Version 12017-11-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.