PT-2021-19542

Name of the Vulnerable Software and Affected Versions MISP version 2.4.136 Description The issue is related to a crafted URL that can cause XSS via the app/View/Elements/global menu.ctp user homepage favourite button. Recommendations For MISP version 2.4.136, consider disabling access to the...