CVE Catalog
CVE-2023-37307
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.42%
34th percentile - higher than 34% of all known CVEs
Summary
In MISP before version 2.4.172, the title_for_layout parameter is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.
Risk Assessment
The lack of proper sanitization may lead to XSS attacks, posing a threat to the application's security and user data.
Recommendation
It is recommended to upgrade MISP to version 2.4.172 or later to mitigate this vulnerability.
Original NVD description (English source)
In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.