{"id":"CVE-2019-14286","details":"In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability.","modified":"2026-08-07T14:49:56.194306Z","published":"2019-07-27T18:15:12.120Z","references":[{"type":"FIX","url":"https://github.com/MISP/MISP/commit/26bedd8a68c32a2f14460a8eac2a9fb09923392b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/misp/misp","events":[{"introduced":"26ecc638a6e1b5cb8a4633898d48fbc0055a9e47"},{"last_affected":"26ecc638a6e1b5cb8a4633898d48fbc0055a9e47"},{"fixed":"26bedd8a68c32a2f14460a8eac2a9fb09923392b"}],"database_specific":{"extracted_events":[{"introduced":"2.4.111"},{"last_affected":"2.4.111"}],"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:misp-project:misp:2.4.111:*:*:*:*:*:*:*"}}],"versions":["2.4.111","v2.4.111"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14286.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}