MISP Project misp-guard input validation error vulnerability

Versions 1.3 and earlier of the MISP Project’s misp-guard contain an input validation error vulnerability. This flaw arises because the processfeedresponse method in src/mispguard.py fails to filter out HTTP 2xx status codes other than 200. Once an attacker controls or manipulates the feed...

BSimVis cross-site scripting vulnerabilities

BSimVis is a binary program similarity analysis and visualization tool developed by the MISP Project. Versions of BSimVis up to v0.2.0 contained a cross-site scripting vulnerability. This vulnerability allowed attackers to execute operations as victims, access data that the victims could access, ...

CVE-2025-4130

creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...