CVE-2022-29529

MEDIUM 5.4CVE-2022-29529 · Published 20/04/2022 · updated 22/06/2026

In short

CVE-2022-29529 is a MEDIUM (CVSS 5.4) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 0.83%, higher than 57.5% of all vulnerabilities.
Fix: update to 2.4.158 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.158`	`2.4.158`

An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.4.158

2.4.158

More vulnerabilities in misp

See all →