| Package | Affected versions | Patched versions |
|---|---|---|
| misp | < 2.4.193 | 2.4.193 |
In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free