CVE-2021-25325

by Fred · 19/01/2021

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs.

Date published : 2021-01-19