Advisories · Technology
MISP cti-transmute.
Every CVE that names MISP cti-transmute among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes
- MISP cti-transmute
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting
- MISP cti-transmute
- Cross-site scripting (XSS)
- CWE-116
- CVSS 8.7 High
cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses
- MISP cti-transmute
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface
- MISP cti-transmute
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon
- MISP cti-transmute
- Cross-site scripting (XSS)
- CWE-20
- CVSS 2.3 Low
cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata
- MISP cti-transmute
- Cross-site scripting (XSS)
- CWE-116
- CVSS 5.3 Medium
cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data
- MISP cti-transmute
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
cti-transmute Missing Authorization Allows Reactions to Private Comments
- MISP cti-transmute
- Broken access control
- CVSS 5.3 Medium
cti-transmute Evaluation Report Exports Expose Private Comments and Author Information
- MISP cti-transmute
- Broken access control
- CVSS 5.3 Medium
cti-transmute Following List Exposes User Email Addresses to Authenticated Users
- MISP cti-transmute
- Information disclosure
- CVSS 6.9 Medium
cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion
- misp cti-transmute
- Broken access control
- CVSS 5.1 Medium
Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content
- misp cti-transmute
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute
- misp cti-transmute
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.8 High
Cross-Site Request Forgery in the Administrative User Deletion Endpoint
- misp cti-transmute
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute
- misp cti-transmute
- Denial of service
- CVSS 8.8 High
Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering
- misp cti-transmute
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names
- misp cti-transmute
- Cross-site scripting (XSS)