Christian Studer

Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

Cross-Document Parser State Contamination in misp-stix

cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes

cti-transmute Evaluation Report Exports Expose Private Comments and Author Information

cti-transmute Missing Authorization Allows Reactions to Private Comments

cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata