medium6.1
CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.
Impact
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | Version 2.4.136 |