PT-2024-36400 · Misp · Misp

Fukusuke Takahashi + 1 · Published 2024-12-04 · Updated 2024-12-05 · CVE-2024-54674

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MISP versions 2.5.2 and earlier

Description The issue is related to stored Cross Site Scripting (XSS) in the MISP Galaxy Cluster Export Function. This occurs when exporting custom clusters into the misp-galaxy format. The file app/View/GalaxyClusters/cluster export misp galaxy.ctp is specifically affected.

Recommendations For versions 2.5.2 and earlier, consider disabling the export function of custom clusters to the misp-galaxy format until a patch is available. Restrict access to the cluster export misp galaxy.ctp file to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-54674

Affected Products

Misp

References · 7

• https://osv.dev/vulnerability/CVE-2024-54674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54674 · Security Note
• https://github.com/MISP/MISP/commit/d0330989e235a8a9f43c90817896de87a589ef7d · Note
• https://twitter.com/CVEnew/status/1864417972879536180 · Twitter Post
• https://t.me/cvedetector/12031 · Telegram Post
• https://twitter.com/HWGSababa/status/1864692031152660523 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1864424903564247314 · Twitter Post