CVE-2021-3184

Published January 19th, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

GitHub

6.38K