CVE-2022-27246

MEDIUM 6.1CVE-2022-27246 · Published 18/03/2022 · updated 22/06/2026

In short

CVE-2022-27246 is a MEDIUM (CVSS 6.1) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.8% of all vulnerabilities.
Fix: update to 2.4.156 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.156`	`2.4.156`

An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by default.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.