CERT24Stored XSS in MISP Overmind theme viewsLoading data…
CERT24Threat Observatory
Period

Stored XSS in MISP Overmind theme views

A CWE-79 vulnerability allows HTML or JavaScript to be injected through a user-controlled object name and executed in the victim’s browser within the MISP origin. The source states that the description and metadata are draft material requiring human validation.

← Back to intelligence

Stored XSS in MISP Overmind theme views

A CWE-79 vulnerability allows HTML or JavaScript to be injected through a user-controlled object name and executed in the victim’s browser within the MISP origin. The source states that the description and metadata are draft material requiring human validation.