https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:39:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-81820 <p><strong>Affected:</strong> flowintel</p> <p>Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as:</p> <p>* object UUID;</p> <p>* object name;</p> <p>* attribute value;</p> <p>* attribute type;</p> <p>* comment;</p> <p>* first/last seen values;</p> <p>* IDS flag.</p> <p>Those values were concatenated directly into HTML strings before rendering. The upstream commit explicitly states that DOMPurify removed XSS vectors but still allowed other HTML elements, such as forms, through.</p> <p>The fix replaces direct string interpolation with DOM construction via document.createElement() and assigns all attacker-controlled values using textContent. The headline is similarly converted to escaped HTML through a temporary element.</p> <p>Version impacted =&gt;3.3.0</p> <p><strong>Affected:</strong> flowintel</p> <p>Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as:</p> <p>* object UUID;</p> <p>* object name;</p> <p>* attribute value;</p> <p>* attribute type;</p> <p>* comment;</p> <p>* first/last seen values;</p> <p>* IDS flag.</p> <p>Those values were concatenated directly into HTML strings before rendering. The upstream commit explicitly states that DOMPurify removed XSS vectors but still allowed other HTML elements, such as forms, through.</p> <p>The fix replaces direct string interpolation with DOM construction via document.createElement() and assigns all attacker-controlled values using textContent. The headline is similarly converted to escaped HTML through a temporary element.</p> <p>Version impacted =&gt;3.3.0</p> https://vulnerability.circl.lu/vuln/cve-2026-81820