High · 7.2 CVE-2024-58130 EUVD-2024-54330GHSA-rjwx-2xjg-q573

In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON respo…

Published Mar 28, 2025 · Updated Mar 31, 2025 · Assigned by mitre

Vendor: MISP Product: MISP

Description

In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses.

Affected products

Vendor	Product	Affected	Fixed
MISP	MISP	< 2.4.193	2.4.193

Advisories 1

WID-SEC-2025-0656 MISP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Mar 30, 2025

References