Medium · 5.4 CVE-2025-67906 EUVD-2025-203326GHSA-x84j-v2j2-g9v8

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

Published Dec 15, 2025 · Updated Dec 21, 2025 · Assigned by mitre

Vendor: MISP Product: MISP

Description

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

Affected products

Vendor	Product	Affected	Fixed
MISP	MISP	< 2.5.28	2.5.28

Advisories 1

WID-SEC-2025-2839 MISP: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Dec 14, 2025

References