Medium severity6.1NVD Advisory· Published Aug 24, 2017· Updated Jun 22, 2026

CVE-2017-13671

Description

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Misp/Misp2 versions
cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*range: <=2.4.78
- (no CPE)range: <2.4.79

Patches

Vulnerability mechanics

References

github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aanvdPatchThird Party Advisory
www.securityfocus.com/bid/100533nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000