CVE-2019-10254

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.

• CWE-79

• https://github.com/MISP/MISP/commit/586cca384be6710b03e14bcbeb7588c1772604ecPatch, Third Party Advisory
• https://github.com/MISP/MISP/compare/f493659...0e4f66ePatch, Third Party Advisory
• https://github.com/MISP/MISP/commit/586cca384be6710b03e14bcbeb7588c1772604ecPatch, Third Party Advisory
• https://github.com/MISP/MISP/compare/f493659...0e4f66ePatch, Third Party Advisory

Published

Mar 28, 2019

Last Modified

Jun 22, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10248Eclipse Vorto versions prior to 0.11 resolved Maven build ar…
• CVE-2019-10249All Xtext & Xtend versions prior to 2.18.0 were built using …8.1
• CVE-2019-1025A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-10250UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downl…
• CVE-2019-10251The UCWeb UC Browser application through 2019-03-26 for Andr…
• CVE-2019-10253A Cross-Site Request Forgery (CSRF) vulnerability exists in …6.5
• CVE-2019-10255An Open Redirect vulnerability for all browsers in Jupyter N…
• CVE-2019-10256An authentication bypass vulnerability in VIVOTEK IPCam vers…9.8
• CVE-2019-10257Zucchetti HR Portal through 2019-03-15 allows Directory Trav…
• CVE-2019-1026An elevation of privilege exists in Windows Audio Service. A…7.8
• CVE-2019-10260Total.js CMS 12.0.0 has XSS related to themes/admin/views/in…
• CVE-2019-10261CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Per…