CVE-2021-25324: XSS
Published Jan 19, 2021
·Updated
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp.
Affected Software
2 affected components
Misp Misp=2.4.136
Misp-project Misp=2.4.136
Remediation
Event History
Jan 19, 2021
CVE Published
via MITRE·03:30 PM
Data Sourced
via MITRE·03:30 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-25324?
The severity of CVE-2021-25324 is medium.
2
How does CVE-2021-25324 affect MISP?
CVE-2021-25324 affects MISP version 2.4.136.
3
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-25324?
The Common Weakness Enumeration (CWE) ID for CVE-2021-25324 is CWE-79.
4
How can I fix CVE-2021-25324?
To fix CVE-2021-25324, update MISP to version 2.4.137 or later.
5
Where can I find more information about CVE-2021-25324?
More information about CVE-2021-25324 can be found at the following link: [https://github.com/MISP/MISP/commit/741243f707cac7de1a3769a38e03004f037f4a3d](https://github.com/MISP/MISP/commit/741243f707cac7de1a3769a38e03004f037f4a3d)