CVE-2019-10254 - In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability

MEDIUM

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability

Published Mar 28, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.88%

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2259		Advisory
https://github.com/MISP/MISP/commit/586cca384be6710b03e14bcbeb7588c1772604ec		x_refsource_MISCPatchThird Party Advisory
https://github.com/MISP/MISP/compare/f493659...0e4f66e		x_refsource_MISCPatchThird Party Advisory