CVE-2017-13671

6.1 mediumEPSS 1.0%

Medium (6.1) in misp-project misp. EPSS 1.0% chance of exploitation in the next 30 days.

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-08-24
Modified: 2026-06-22
Record from: the NVD, synced 2026-10-19

Affected

misp-project:misp

References

http://www.securityfocus.com/bid/100533
https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa
http://www.securityfocus.com/bid/100533
https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa

Check your stack JSON