CVE-2019-14286: XSS
Published Jul 27, 2019
·Updated
In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability.
Affected Software
2 affected components
Misp Misp=2.4.111
Misp-project Misp=2.4.111
Remediation
Event History
Jul 27, 2019
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-14286?
The severity of CVE-2019-14286 is medium, with a CVSS score of 6.1.
2
How does the stored XSS vulnerability in MISP 2.4.111 occur?
The stored XSS vulnerability in MISP 2.4.111 occurs in the event-graph view when a user toggles the event graph view.
3
What is the affected software version of CVE-2019-14286?
CVE-2019-14286 affects MISP 2.4.111.
4
How can the stored XSS vulnerability in MISP 2.4.111 be exploited?
To exploit the stored XSS vulnerability in MISP 2.4.111, a malicious MISP event must be crafted.
5
Is there a fix available for CVE-2019-14286?
Yes, a fix for CVE-2019-14286 is available. More information can be found in the reference link.