Vulnerabilities > CVE-2021-35502 - Unspecified vulnerability in Misp 2.4.144

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

misp

critical

NVD

Published: 2021-06-25

Updated: 2021-07-01

Summary

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index.

Vulnerable Configurations

Part	Description	Count
Application	Misp Misp Misp 2.4.144	1

References

https://github.com/MISP/MISP/commit/2fde6476dc3173affc61874ba2adb35400a8fda5