medium5.4
CVE-2021-37742
app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.
Impact
app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | Version 2.4.147 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192
- https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/
- https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192
- https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/