CVE-2023-48659
Critical · CVSS 9.8MISP — Reflected Cross-Site Scripting (XSS) via parameter parsing mishandling
- CVSS
- 9.8
- nvd
- EPSS
- 0.91%
- 55th pct
- KEV
- No
- Class
- oss containerizable
- NVD-CWE-noinfo
Description
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
Search profile — drives PoC discovery
Symbols AppController.phpapp/Controller/AppController.phpparameter parsinggalaxiesv2.4.175v2.4.17637ecf81b84a01baa4d4b1fade4de94a9018c32ed
Keywords CVE-2023-48659MISP XSSMISP AppController parameter parsingMISP reflected XSS galaxiesMISP before 2.4.176MISP 2.4.175 vulnerabilityMISP galaxies XSS PoC
Versions: < 2.4.176
References
- https://github.com/MISP/MISP/commit/37ecf81b84a01baa4d4b1fade4de94a9018c32ed
- https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176
- https://zigrin.com/advisories/misp-reflected-cross-site-scripting-in-galaxies/
- https://github.com/MISP/MISP/commit/37ecf81b84a01baa4d4b1fade4de94a9018c32ed
- https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176
- https://zigrin.com/advisories/misp-reflected-cross-site-scripting-in-galaxies/
Status: enriched · ingested 2026-06-23T18:00:15.000Z · profiled 2026-06-24T06:30:26.000Z