Jeroen Pinoy

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP Information Disclosure via Forged Upload Path

MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends

Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu