CVE-2023-24027

MediumCVSS 6.1

Published: 20/01/2023(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

In MISP version 2.4.167, there is an XSS vulnerability that allows an attack via a network history name in the app/webroot/js/action_table.js file.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability and to monitor the application for unauthorized activities.

Original NVD description (English source)

In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.