Security readout for executives and security teams
Plain-English summary
CVE-2018-11245 is a DOM-based cross-site scripting issue reported in MISP 2.4.91. It involves cortex type attributes handled by app/webroot/js/misp.js. The supplied sources do not provide a CVSS score, affected version range, or evidence of active exploitation.
Executive priority
Treat as a moderate-priority application security fix for organizations running MISP. It is not supported as an emergency internet-wide issue by the supplied sources, but XSS in a threat-intelligence platform can affect trusted user sessions.
Technical view
The issue is described as DOM XSS in MISP 2.4.91 within app/webroot/js/misp.js, tied to cortex type attributes. The public bundle cites a MISP commit and a Zigrin advisory, but does not include exploit prerequisites, broader affected versions, or named mitigations beyond the fix reference.
Likely exposure
Exposure is most likely limited to MISP deployments at or near version 2.4.91 using Cortex-related UI features. The bundle does not prove other versions are affected.
Exploitation context
No active exploitation is cited, and the CVE is not marked KEV. DOM XSS generally requires a browser-side trigger path, but exact attacker privileges, user interaction, and data-control requirements are not stated in the supplied evidence.
Researcher notes
Evidence is sparse: no CVSS, CWE, affected version range, or exploitation telemetry is included. Keep analysis constrained to MISP 2.4.91, app/webroot/js/misp.js, and cortex type attributes unless vendor or advisory details add scope.
Mitigation direction
- Check MISP vendor guidance for the fixed release containing the cited commit.
- Upgrade affected MISP deployments through supported vendor release channels.
- Prioritize instances accessible to untrusted users or broad internal audiences.
- Review Cortex-related UI usage until fixed.
- Apply normal session, admin-access, and browser hardening controls.
Validation and detection
- Inventory MISP deployments and record exact versions.
- Check whether MISP 2.4.91 is present in production or staging.
- Confirm whether the cited MISP fix commit is included.
- Review vendor release notes or package metadata for remediation status.
- Document any Cortex-related feature exposure to untrusted users.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-11245 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.