CVE-2021-25324

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

CVE-2021-25324

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

CVE-2021-25324: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...

PT-2021-16520

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.136 Description: The issue is related to Stored XSS in the galaxy cluster view. This occurs via a cluster name to the app/View/GalaxyClusters/view.ctp file. Recommendations: For MISP version 2.4.136, consider restricting acce...