CVE-2022-29532

MEDIUM 4.8CVE-2022-29532 · Published 20/04/2022 · updated 22/06/2026

In short

CVE-2022-29532 is a MEDIUM (CVSS 4.8) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 57.9% of all vulnerabilities.
Fix: update to 2.4.158 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.158`	`2.4.158`

Description

An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it.

References

MISP/MISP commit 60c85b8 · Patch
MISP/MISP · Release Notes
zigrin.com/advisories/misp-xss-in-the-cerebrate-view · Third Party Advisory
zigrin.com/cakephp-application-cybersecurity-research-protect-your-website-from-stored-xss-attacks-understanding-and-preventing-vulnerabilities-in-open-source-applications · Exploit

More vulnerabilities in misp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

misp

misp-project

< 2.4.158

2.4.158

More vulnerabilities in misp

See all →