PT-2025-13585

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.193 Description The issue is related to a lack of sanitization for non-JSON responses in REST endpoints, specifically in the RestResponseComponent.php file. This could potentially lead to cross-site scripting...

CVE-2024-58130: Improper Neutralization of Input During Web Page Generation

In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses...