Vulnerabilities > CVE-2021-35502 - Unspecified vulnerability in Misp 2.4.144

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

misp

NVD

Published: 2021-06-25

Updated: 2021-07-01

Summary

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index.

Vulnerable Configurations

Part	Description	Count
Application	Misp Misp Misp 2.4.144	1

References

https://github.com/MISP/MISP/commit/2fde6476dc3173affc61874ba2adb35400a8fda5