{"id":"CVE-2018-11245","details":"app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.","modified":"2026-08-07T14:54:06.181241Z","published":"2018-05-18T18:29:00.280Z","references":[{"type":"ADVISORY","url":"https://zigrin.com/advisories/misp-xss-with-cortex-type-attributes/"},{"type":"FIX","url":"https://github.com/MISP/MISP/commit/5efc07b12f82301a6086fd3433fedd69fe7119d3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/misp/misp","events":[{"introduced":"4ad7a4a26e3608ef74fa7023ad0a1045de2b1f3b"},{"last_affected":"4ad7a4a26e3608ef74fa7023ad0a1045de2b1f3b"},{"fixed":"5efc07b12f82301a6086fd3433fedd69fe7119d3"}],"database_specific":{"cpe":"cpe:2.3:a:misp-project:misp:2.4.91:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.4.91"},{"last_affected":"2.4.91"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.4.91","v2.4.91"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11245.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}