https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:44:15 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-104906 <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-104906 https://vulnerability.circl.lu/vuln/gcve-1-2026-20251 <p><strong>Affected:</strong> MISP</p> <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> <p><strong>Affected:</strong> MISP</p> <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> https://vulnerability.circl.lu/vuln/gcve-1-2026-20251 https://vulnerability.circl.lu/vuln/ghsa-x6q8-3wfm-g2w6 <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> <p>MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII object (e.g., by publishing a malicious object to a TAXII server that the victim&#39;s MISP instance subscribes to) can inject arbitrary HTML or JavaScript that executes in the context of the victim&#39;s MISP session.</p> <p>Preconditions:</p> <p>- The victim must be an authenticated MISP user with access to the TAXII object viewer.</p> <p>- The victim must open or view the crafted TAXII object.</p> <p>Impact:</p> <p>- Execution of arbitrary JavaScript in the victim&#39;s browser within the MISP application context.</p> <p>- Potential theft of session tokens, API keys, or other sensitive data accessible from the MISP interface.</p> <p>- Potential for performing actions on behalf of the authenticated user.</p> <p>Affected versions: &lt;2.5.48.</p> https://vulnerability.circl.lu/vuln/ghsa-x6q8-3wfm-g2w6