Description
In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.
Advisories 1
- WID-SEC-2022-2395 MISP: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Dec 22, 2022
Published Dec 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre
In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.