medium6.1
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp.
Impact
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | Version 2.4.136 |