CVE-2023-41098

Summary

CVE-2023-41098 is a reflected XSS vulnerability affecting MISP (Malware Information Sharing Platform) version 2.4.174. This issue is located in the DashboardsController.php file and can be exploited by malicious actors through the id parameter during a dashboard editing operation. Successful exploitation of this vulnerability could lead to the injection of malicious scripts into the webpage viewed by the victim, potentially resulting in unintended actions or data theft. It is recommended that users of MISP 2.4.174 upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.