franckferman/CVE-2025-67906

franckferman/CVE-2025-67906

GitHubGitHub
GitHubgithub.com
nvd.nist.govnvd.nist.gov
Releases0
Stars2
MISP <= 2.5.27 - Stored Cross-Site Scripting via Workflow Engine (doT.js Template Injection).
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-67906↗
5.4 MEDIUM—

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.