CVE-2022-29533

MEDIUM 6.1CVE-2022-29533 · Published 20/04/2022 · updated 22/06/2026

In short

CVE-2022-29533 is a MEDIUM (CVSS 6.1) vulnerability affecting misp (misp-project).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 57.8% of all vulnerabilities.
Fix: update to 2.4.158 or later.

Package	Affected versions	Patched versions
misp misp-project	`< 2.4.158`	`2.4.158`

Description

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."

References

MISP/MISP commit ce6bc88 · Patch
MISP/MISP · Release Notes
zigrin.com/advisories/misp-xss-in-app-controller-organisationscontroller-php · Third Party Advisory

More vulnerabilities in misp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

misp

misp-project

< 2.4.158

2.4.158

More vulnerabilities in misp

See all →