Vulnerabilities

MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints.

MISP contains an authorization flaw in its correlation handling during attribute searches.

MISP contains an authorization bypass in the related events listing functionality.

MISP contains an improper input validation vulnerability in the decaying model import functionality.

MISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page.

MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer.

MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature.

MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview.