CVE-2019-14286

MediumCVSS 6.1

Published: 27/07/2019(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.81%

52th percentile - higher than 52% of all known CVEs

Summary

In MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view in app/webroot/js/event-graph.js, triggered when a user toggles the event graph view. A malicious MISP event must be crafted to exploit this vulnerability.

Risk Assessment

This vulnerability could allow the execution of malicious code in users' browsers, posing a threat to data security and system integrity.

Recommendation

It is recommended to update MISP to the latest version to mitigate this vulnerability and to monitor and verify events in the system.

Original NVD description (English source)

In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability.