5 matches found
EUVD-2025-203326
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path...
5.4CVSS6AI score0.00329EPSS
SaveExploits1References6
CVE-2025-67906
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path...
5.4CVSS6AI score0.00329EPSS
SaveExploits1References5
CVE-2025-67906
CVE-2025-67906 affects MISP prior to 2.5.28, where the app/View/Elements/Workflows/executionPath.ctp component is vulnerable to XSS due to improper handling of user-supplied data in the workflow execution path. This could allow injected scripts to run in a user’s browser. Remediation: upgrade to ...
9CVSS6AI score0.00329EPSS
SaveExploits1References5Affected Software1
20