Security Advisory
CVE-2021-25325
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs.