CVE Catalog
CVE-2023-28884
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.41%
32th percentile - higher than 32% of all known CVEs
Summary
In MISP version 2.4.169, the file app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
Risk Assessment
An XSS attack can lead to user data theft and session hijacking, posing a serious threat to the application's security and its users.
Recommendation
It is recommended to update MISP to the latest version to eliminate this vulnerability and implement appropriate input filtering in the application.
Original NVD description (English source)
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.