CVEvulnerability
CVE-2015-5720
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-09-03
- Last modified
- 2026-06-23
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.
Affected configurations
• misp-project misp (<= 2.3.89)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/92738 www.securityfocus.com
- https://github.com/MISP/MISP/commit/812ac878c3645c02e2a599287117418424cbd4cf Issue Tracking, Patch
- https://www.circl.lu/advisory/CVE-2015-5720/ Third Party Advisory
- http://www.securityfocus.com/bid/92738 www.securityfocus.com
- https://github.com/MISP/MISP/commit/812ac878c3645c02e2a599287117418424cbd4cf Issue Tracking, Patch
- https://www.circl.lu/advisory/CVE-2015-5720/ Third Party Advisory