MISP Cross-Site Script Vulnerabilities

Versions of MISP prior to 2.5.48 contained a cross-site scripting vulnerability. This vulnerability stemmed from the fact that the parameter names returned by the misp-modules service in the workflow module interface were not encoded before being rendered as raw HTML form tags. This made the syst...