CVE-2021-3184

MediumCVSS 6.1

Published: 19/01/2021(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

MISP version 2.4.136 has an XSS vulnerability that can be exploited via a crafted URL to the user homepage favourite button in app/View/Elements/global_menu.ctp.

Risk Assessment

Exploitation of this vulnerability may lead to session hijacking or injection of malicious code, posing a threat to the organization's data security.

Recommendation

It is recommended to update MISP to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.