CVE-2020-29572

MediumCVSS 6.1

Published: 06/12/2020(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

MISP version 2.4.135 has an XSS vulnerability in the authkey comment field in the genericField.ctp file.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability and review application security.

Original NVD description (English source)

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field.