← All advisories

Medium severity5.4NVD Advisory· Published Jun 30, 2023· Updated Jun 23, 2026

CVE-2023-37307

CVE-2023-37307

Description

In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Misp/Misp3 versions
cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*range: <2.4.172
- (no CPE)
- (no CPE)range: <2.4.172

Patches

Vulnerability mechanics

References

4

github.com/MISP/MISP/commit/286c84fab0047726a6a396ceefaae1bb666fc485nvdPatch
github.com/MISP/MISP/compare/v2.4.171...v2.4.172nvdPatchProduct
zigrin.com/advisories/misp-stored-xss/nvdThird Party Advisory
packetstormsecurity.com/files/176975/MISP-2.4.171-Cross-Site-Scripting.htmlnvd

News mentions

0

No linked articles in our index yet.