EUVD-2021-26527

Malware in sbrugna...

Design/Logic Flaw

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...

CVE-2021-3184

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...

CVE-2021-3184

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...

PT-2021-19542

Name of the Vulnerable Software and Affected Versions MISP version 2.4.136 Description The issue is related to a crafted URL that can cause XSS via the app/View/Elements/global menu.ctp user homepage favourite button. Recommendations For MISP version 2.4.136, consider disabling access to the...

CVE-2021-3184: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...