CVE-2023-24070

MediumCVSS 6.1

Published: 23/01/2023(UTC)Updated: 23/06/2026(UTC)Translated: 24/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

In MISP versions up to 2.4.167, there is an XSS vulnerability in app/View/AuthKeys/authkey_display.ctp that can be exploited via the Referer field when adding an authkey.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update MISP to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field.