CVE Catalog
CVE-2019-11812
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.81%
52th percentile - higher than 52% of all known CVEs
Summary
A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code in the victim's browser context, potentially leading to data theft or session hijacking.
Recommendation
It is recommended to upgrade MISP to version 2.4.107 or later to mitigate this vulnerability.
Original NVD description (English source)
A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.